Meta

user_creation_mode setting controls how the creation of users should be handled in relation to SSO information. With the 'manual' mode, a user that exists externally in an Identity Provider will have to be manually created locally. With the 'sso' mode, that process will be automatic and a matching user will be created if it doesn't exist locally.

users_group_membership_management_mode setting controls how the management of a user's group membership should be handled in relation to SSO information. With the 'manual' mode, the information about the group membership returned from an Identity Provider will not be used and a user will only be a member of groups that were explicitly assigned to him locally. With the 'sso' mode, groups returned from Identity Provider will be used instead.