Manage Team - Stackone

Using multiple provisioning methods

An organization can use more than one of these at once. When multiple methods are used, user management can be taken over by the identity provider (IdP):

User’s current status	Email invitation	Just-in-Time Provisioning	SCIM Provisioning
Already a member	Can’t be sent to an existing member.	Leaves them as they are.	Starts managing them when the IdP assigns them.
Invited, but hasn’t accepted yet	Adds them with the invitation’s role when they accept it.	Doesn’t add them. They join only by accepting the invitation.	Adds them with the role the IdP sends, not the invitation’s. The invitation should be removed.
Neither	Adds them when they accept it.	Adds them the first time they sign in to StackOne with SSO.	Adds them when the IdP assigns them.

Removing access to the organization

Disabling or deleting a user ends their access to the organization, including any AI platform connections they made to it.

Disable keeps their roles, group memberships and seat, so enabling them again restores their access.

Delete removes their roles and group memberships, and frees their seat. To give them access again, invite them back.

An organization’s last active Organization Admin cannot be disabled or deleted.

How to remove someone depends on how the organization adds people:

The organization uses	Remove them by
Invitations only	Disabling or deleting them on the Members tab of Organization > Manage Team.
Just-in-Time Provisioning	Following the steps in Just-in-Time Provisioning > Remove access to the organization.
SCIM Provisioning	Following the steps in SCIM Provisioning > Deprovisioning.

Invite Users

Just-in-Time Provisioning

SCIM Provisioning

​Using multiple provisioning methods

​Removing access to the organization

Using multiple provisioning methods

Removing access to the organization