> For the complete documentation index, see [llms.txt](https://docs.snyk.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.snyk.io/platform-administration/user-management/single-sign-on-sso-for-authentication-to-snyk/choose-a-provisioning-option.md).

# Choose a provisioning option

How to choose a Snyk SSO provisioning option that controls how new users in your company gain access

{% hint style="warning" %}
Contact your Snyk account team or Snyk Support to turn on custom mapping once you have completed the setup steps.
{% endhint %}

Determine how new users in your company will get access to Snyk:

* [Open to all](#open-to-all)
* [Invitation required](#invitation-required)
* [Custom mapping](#custom-mapping)

## Open to all

With the Open option, all users have automatic access to Snyk by using SSO to log in. They will have access to all Organizations in your selected Group. Their accounts will all be provisioned with the same role, with two options:

* The **Org** **administrator** role allows all new users to manage other Org admins and collaborators, view Group reports, and work with Organizations within the Group as well as perform non-administrative tasks in the Organization.
* The **Org** **collaborator** role can perform non-administrative tasks in the Organization.

Let Snyk Support know whether new users will have the administrator role or the collaborator role for the Organization. The selected role applies for all users. For details, see [Pre-defined roles](/platform-administration/user-management/pre-defined-roles.md).

## Invitation required

With the invitation required or Group Member option, admins can invite users or users can request access to an Organization.

There are two ways to invite users to Organizations. Invite members (see [Manage users in Organizations](/platform-administration/snyk-hierarchy/organizations/manage-users-in-organizations.md)) or automate the process using the Snyk [API Invite users endpoint](https://docs.snyk.io/developer-tools/snyk-api/reference/organizations-v1#org-orgid-invite).

If users who have not been invited use SSO to log in, they will gain access to Snyk, but they will not see any Projects until an admin invites them or manually adds them to the applicable Organizations. You can provide a list of Organizations with the appropriate contact person so that new users can [request access](/platform-administration/snyk-hierarchy/organizations/requests-for-access-to-an-organization.md).

## Custom mapping

{% hint style="info" %}
**Feature availability**\
Custom Mapping is available only for Enterprise plans. For more information, see [plans and pricing](https://snyk.io/plans/).
{% endhint %}

You can provision user accounts with customized rules using the [Custom Mapping Option](/platform-administration/user-management/single-sign-on-sso-for-authentication-to-snyk/custom-mapping.md).

You can configure SSO differently for each of your different Groups. You can also map users to a specific Organization and role assignment based on information from the identity provider.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.snyk.io/platform-administration/user-management/single-sign-on-sso-for-authentication-to-snyk/choose-a-provisioning-option.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.