Single Sign-On
With automatic user provisioning enabled, Portainer will create user(s) automatically with the standard user role. If disabled, users must be created beforehand in Portainer in order to login.

The users created by the automatic provisioning feature can be added to a default team on creation.

By assigning newly created users to a team, they will be able to access the environments associated to that team. This setting is optional and if not set, newly created users won't be able to access any environments.

Default team You have not yet created any teams. Head over to the Teams view to manage teams.

The default team option will be disabled when automatic team membership is enabled

Team membership
Automatic team membership synchronizes the team membership based on a custom claim in the token from the OAuth provider.
Claim name
Statically assigned teams
add team mapping
claim value regex
maps to
team
Claim value regex is required.
The default team will be assigned when the user does not belong to any other team
Default team You have not yet created any teams. Head over to the Teams view to manage teams.
OAuth Configuration
Tenant ID
{{ $ctrl.state.provider == 'microsoft' ? 'Application ID' : 'Client ID' }}
{{ $ctrl.state.provider == 'microsoft' ? 'Application key' : 'Client secret' }}
Authorization URL
Access token URL
Resource URL
Redirect URL
Logout URL
User identifier
Scopes
Override default configuration Use default configuration