Invite new users

||Connect docs via MCP

Add people to your Atlan workspace so they can sign in. How you do it depends on your authentication setup: email invites when SSO is not enforced, identity provider assignment when it is.

Prerequisites

Before you invite users, make sure:

• You are an admin in Atlan. Members and guests cannot invite other users.
• You know which role each new user should have (Admin, Member, or Guest).
• You are using a non-disposable email address. Atlan blocks invitations to disposable email addresses (such as mailinator.com or tempmail.com).

Usernames are permanent

Atlan uses usernames as a unique identifier across the platform and does not support changing them later. Ask each new user to choose their preferred username during their first login.

Invite users

The way you add new users depends on whether SSO is enforced for your workspace. Choose the tab that matches your setup.

Without SSO

When SSO is not enforced, you invite users from the Atlan UI by entering their email address and assigning each one a role.

1. In Atlan, click Settings from the left menu to open the workspace settings.

   If you are using the old UI, click Admin from the left menu instead. Both lead to the same place.

2. Under Workspace, click Users to see the list of existing users, then click the Invite Users button in the top right.

3. Under Invite users to Default, enter one or more email addresses, and select a role for each user from the dropdown next to their email. The role you choose determines what each user can do once they sign in.

   For example:

   alex.carter@yourcompany.com   -   Member
   jordan.lee@yourcompany.com    -   Admin

4. Click the Send Invite button. Atlan emails each invited user a sign-up link valid for 7 days. If a link expires before the user signs up, return to the same Users page and resend the invitation.

To remove a user later, return to Settings → Workspace → Users, find the user in the list, and click Remove. To automatically deactivate users when they leave your identity provider, set up User offboarding.

With SSO

When SSO is enforced for your workspace, the Invite Users button in the Atlan UI is disabled. Instead, users come in through your identity provider (IdP) such as Okta, Azure AD, Google, or any SAML 2.0 provider. A user profile is created automatically on their first sign-in.

1. In your identity provider, open the Atlan application you configured during SSO setup. If you have not configured SSO yet, follow your provider's setup guide first: Okta, Azure AD, Google, JumpCloud, OneLogin, or generic SAML 2.0.

2. Assign the new user (or the IdP group that contains them) to the Atlan application. The exact steps depend on your IdP, so refer to your provider's documentation for the assignment flow.

3. Ask the new user to sign in to Atlan with their SSO credentials. On their first sign-in, Atlan automatically creates a user profile for them. You do not need to send a manual invite.

Control the default role for SSO-provisioned users

By default, new SSO-provisioned users are assigned the Member role. To change this, see Set default user roles for SSO.

For fully automated user lifecycle management (provisioning, updates, and deprovisioning), set up SCIM provisioning alongside SSO.

Need help?

If you have any issues while inviting users, contact Atlan Support for assistance.

Next steps

• Assign roles: Give each new user the role that sets what they can do.
• Organize teams in groups: Bundle users so you can assign access in bulk.