Skip to main content

Set default user roles for SSO

Connect docs via MCP

When a user signs in to Atlan for the first time via SSO, Atlan auto-provisions their account and assigns a default role. Setting the right default before users start signing in avoids having to manually re-role accounts after the fact.

The default role applies only to newly provisioned SSO users. Existing users keep their current role, and any user's role can be changed individually by an admin at any time.

Prerequisites​

  • You are an admin in Atlan.
  • SSO is already configured for at least one provider. If not, see Set up authentication first.

Set default role​

  1. In your Atlan workspace, click Settings from the left menu.

    If you are using the Old UI (Classic), from the left menu, click Admin.

  2. Click SSO, then open the SSO provider you want to configure.

  3. Under Default Role, select Guest, Member, or Admin from the dropdown.

The next user provisioned through that SSO provider lands with the role you selected. If you have multiple SSO providers configured, each has its own default role setting. Set it for each provider separately.

Need help?​

If new SSO users are landing with the wrong role, check that you updated the default on the correct provider. Atlan supports multiple SSO providers and each has its own setting. Contact Atlan Support if the issue persists.

Next steps​