Choose a provisioning option

Introduction to provisioning options

Determine how new users in your company get access to Snyk: Open to all, Invitation required, or Custom mapping.

Open to all

With the Open option, all users have automatic access to Snyk by using SSO to log in. They will have access to all Organizations in your selected Group. Their accounts will all be provisioned with the same role, with two options:

• The Org administrator role allows all new users to manage other Org admins and collaborators, view Group reports, and work with Organizations within the gFoup.

• The Org collaborator role can access the Organizations.

Let Snyk Support know whether new users will have the administrator role or the collaborator role for the organization. The selected role applies for all users.

Invitation required

With the invitation required or Group Member option, admins can invite users or users can request access to an organization.

There are two ways to invite users to organizations. Invite members (see Manage users in your Organizations) or automate the process using the Snyk API Invite users endpoint.

If users who have not been invited use SSO to log in, they will gain access to Snyk, but they will not see any projects until an admin invites them or manually adds them to the Organization(s). You can show a list of Organizations with the appropriate contact person so that new users can request access.

Custom mapping

Feature availability This feature is available with Enterprise plans. See pricing plans for more details.

You can provision user accounts with customized rules, using the Custom Mapping Option.

You can configure SSO differently for each of your different Groups. You can also map users to a specific Organization and role assignment based on information from the identity provider.

Work with your Snyk account team to prepare for implementing this SSO option.