When a new user is invited to a team that has SSO configured, they will need to go through an email confirmation process for their first login. SSO will only be available for subsequent logins after their account is set up. The SSO functionality becomes available immediately after their initial account setup is complete.
1. Initial Invitation
When you invite a new user to your SSO-enabled team, they will receive an invitation email with a link to join your team. At this point, they don't have an account in the system yet.
2. First-Time Account Setup
The new user must:
Click the invitation link in their email
Complete the standard account registration process
Verify their email address
Set up their password
Confirm their account details
This initial setup process uses the standard email confirmation workflow, not SSO.
3. Subsequent Logins
After the new user has completed their initial account setup and confirmation, they can then use SSO for future logins, provided:
Their email domain matches the domains configured for your SSO setup
They are properly associated with your team/account
Why This Happens:
The system handles new user invitations and existing user SSO authentication as separate processes. New users need to be properly onboarded and have their accounts established before they can use the SSO integration. This ensures proper account setup and security verification.