> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Provisioning and SSO

> Connect AI supports Single Sign-On (SSO) and user provisioning via Just-in-Time (JIT) and System for Cross-domain Identity Management (SCIM).

The following user onboarding and access management modes are available in Connect AI:

* [**Email Invitation**](/en/SCIM#email-invitation): An administrator invites users to the account individually by email.
* [**SSO + JIT**](/en/SCIM/SSO): Users can sign in through your company's SSO provider. Just-in-Time (JIT) provisioning automatically creates user accounts on first SSO login (requires SSO).
* [**SCIM Users**](/en/SCIM/SCIM-Users): Standardizes the process of granting individual user access to Connect AI and removing user access from Connect AI.
* [**SCIM Groups**](/en/SCIM/SCIM-Groups): Standardizes the process of provisioning groups of users to Connect AI, assigning roles, and removing groups from Connect AI.

<Note>
  **Microsoft Entra ID administrators:** Connect AI does not appear in the Microsoft Entra application gallery. Create a new application in Entra to enable SCIM provisioning. See [SCIM Users](/en/SCIM/SCIM-Users) and [SCIM Groups](/en/SCIM/SCIM-Groups) for setup details.
</Note>

## Email Invitation

An Administrator or User Administrator can invite users to Connect AI individually by email. The Administrator or User Administrator sets the user roles and permissions. See [Users](/en/Users) for instructions on inviting users.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.