docs(sso): document auto-provision new users option on all SAML IdP pages (#10726)

Made-with: Cursor

Author: keydunov

docs-mintlify/admin/sso/google-workspace.mdx

@@ -104,7 +104,12 @@ SAML integration in Google into Cube Cloud.
 | Identity Provider Login URL | Use the **Sign on URL** value from Google Workspace         |
 | Certificate                 | Use the **Signing Certificate** value from Google Workspace |
 
-3. Scroll down and click **Save SAML Settings** to save the changes.
+3. Enable **Auto-provision new users** if you want users to be automatically
+   created in Cube on their first login via this SAML provider. New users
+   are assigned the Viewer role by default. Enable this if you are not using
+   SCIM provisioning.
+
+4. Scroll down and click **Save SAML Settings** to save the changes.
 
 ## Test SAML authentication
 

docs-mintlify/admin/sso/microsoft-entra-id/saml.mdx

@@ -80,6 +80,13 @@ values from the Entra **Single sign-on** page:
 - **Certificate** — Paste the Base64-encoded certificate from the
   **SAML Certificates** section.
 
+In both options, also configure the following setting:
+
+- **Auto-provision new users** — When enabled, users are automatically
+  created in Cube on their first login via this SAML provider and assigned
+  the Viewer role by default. Enable this if you want to provision users
+  only when they first access Cube and you are not using SCIM provisioning.
+
 ## Configure attribute mappings
 
 To map user attributes from Entra to Cube, configure the claim URIs

docs-mintlify/admin/sso/okta/saml.mdx

@@ -84,6 +84,10 @@ identity provider details:
 - **SSO (Sign on) URL** — Use the **Identity Provider Single
   Sign-On URL** value from Okta.
 - **Certificate** — Paste the **X.509 Certificate** from Okta.
+- **Auto-provision new users** — When enabled, users are automatically
+  created in Cube on their first login via this SAML provider and assigned
+  the Viewer role by default. Enable this if you want to provision users
+  only when they first access Cube and you are not using SCIM provisioning.
 
 ## Test SAML authentication