Skip to content

Add a User

Personal Accounts are created automatically when a user authenticates for the first time through your organization's identity provider. There is no manual user creation flow in the Qualytics UI or API. All human user provisioning is handled through SSO or Directory Sync.

How Users Are Added

SSO (First Login)

When a user logs in for the first time via your organization's identity provider (e.g., Okta, Microsoft Entra, OneLogin), Qualytics automatically creates their Personal Account. The account inherits the user's name and email from the identity provider claims.

  1. The user navigates to your Qualytics instance URL
  2. They are redirected to your identity provider for authentication
  3. After successful authentication, Qualytics creates a Personal Account on the first request
  4. The new user is assigned the default Member role and added to the Public team

Info

For managed and self-hosted configuration options, see the SSO documentation.

Directory Sync (SCIM)

For automated provisioning and de-provisioning, use Directory Sync to synchronize users and groups between your identity provider and Qualytics. SCIM provisioning creates Personal Accounts before the user's first login, allowing you to pre-assign teams and roles.

  1. Configure Directory Sync with your identity provider
  2. Assign users and groups in your identity provider
  3. Qualytics automatically creates Personal Accounts for provisioned users
  4. Users can log in immediately with their identity provider credentials

Info

For step-by-step setup guides, see the Directory Sync documentation.

After a User Is Added

Once a Personal Account is created through either method, a user with the Admin role can:

Tip

When no Directory Sync role mapping is configured, new users receive the Member role. A user with the Admin role can update the role after the account is created.