From 3cbc6f1a6eea5a6897feba6d304dfd3c1707ce36 Mon Sep 17 00:00:00 2001 From: Leif Dreizler Date: Mon, 15 Mar 2021 14:02:00 -0700 Subject: [PATCH 1/3] prettier --- src/segment-app/iam/sso.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/segment-app/iam/sso.md b/src/segment-app/iam/sso.md index a0a655c26e..7645948a11 100644 --- a/src/segment-app/iam/sso.md +++ b/src/segment-app/iam/sso.md @@ -102,13 +102,13 @@ Enter your domain and click "Add Domain." When you click verify, you're given tw ##### Do you support automatic user provisioning? -Segment supports "just in time" user permissioning; new users who authenticate using your IdP are automatically created in Segment as minimal-access (read-only) members. +Segment supports "just in time" user permissioning; new users who authenticate using your IdP are automatically created in Segment as minimal-access (read-only) members. If the user already exists in Segment then Segment associates the IdP-identity with the existing Segment user account. -If the user already exists in Segment then Segment associates the IdP-identity with the existing Segment user account. +Segment also supports user provisioning and role mapping via [SCIM](/docs/segment-app/iam/scim/). ##### Do you support automatic user de-provisioning? -No. However, since any non-owners must log in with SSO to access your workspace, once you remove their authorization in your IdP they will no longer be able to access your workspace. +Yes, users can be automatically de-provisioned using [SCIM](/docs/segment-app/iam/scim/). ##### Will my users lose access to their other workspaces when I enable SSO? From e0a6cc974f35d4ccd997eae95224c11ae5f40b93 Mon Sep 17 00:00:00 2001 From: Leif Date: Tue, 16 Mar 2021 09:45:46 -0700 Subject: [PATCH 2/3] Update src/segment-app/iam/sso.md Co-authored-by: LRubin --- src/segment-app/iam/sso.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/segment-app/iam/sso.md b/src/segment-app/iam/sso.md index 7645948a11..fecf6dbfd3 100644 --- a/src/segment-app/iam/sso.md +++ b/src/segment-app/iam/sso.md @@ -104,7 +104,7 @@ Enter your domain and click "Add Domain." When you click verify, you're given tw Segment supports "just in time" user permissioning; new users who authenticate using your IdP are automatically created in Segment as minimal-access (read-only) members. If the user already exists in Segment then Segment associates the IdP-identity with the existing Segment user account. -Segment also supports user provisioning and role mapping via [SCIM](/docs/segment-app/iam/scim/). +Segment also supports user provisioning and role mapping [using SCIM](/docs/segment-app/iam/scim/). ##### Do you support automatic user de-provisioning? From 4e24d2ee2d0856f885cc20f858474695b2e90981 Mon Sep 17 00:00:00 2001 From: Leif Date: Tue, 16 Mar 2021 09:45:52 -0700 Subject: [PATCH 3/3] Update src/segment-app/iam/sso.md Co-authored-by: LRubin --- src/segment-app/iam/sso.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/segment-app/iam/sso.md b/src/segment-app/iam/sso.md index fecf6dbfd3..16c7eaa713 100644 --- a/src/segment-app/iam/sso.md +++ b/src/segment-app/iam/sso.md @@ -108,7 +108,7 @@ Segment also supports user provisioning and role mapping [using SCIM](/docs/segm ##### Do you support automatic user de-provisioning? -Yes, users can be automatically de-provisioned using [SCIM](/docs/segment-app/iam/scim/). +Yes, users can be automatically de-provisioned [if you use SCIM](/docs/segment-app/iam/scim/). ##### Will my users lose access to their other workspaces when I enable SSO?