> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/invite-users-to-devolutions-cloud-with-sso.md).

# Invite users to Devolutions Cloud with SSO

Once SSO is [configured and enabled](https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/configure-sso-authentication-microsoft-azure/), you can use this specific invite for all your users.

This method will send a preformatted email to all the recipients. It will provide your Devolutions Cloud URL with an invitation ID and a key for them to use.

{% hint style="warning" %}
The invitation ID and key are for pre-approving access to Devolutions Cloud. They expire 7 days from the day they are sent.
{% endhint %}

{% hint style="info" %}
As part of the creation process, a Devolutions Account will be created since it is required to access Devolutions Cloud, but it will not be necessary to set a password since your users will authenticate via Entra ID.
{% endhint %}

### Invite Organization Users

1. Go to ***Administration – Users***. If you have new users who are synced from your provider, they will be ready to be invited. You can see their count in the ***Invitation required*** widget. Click on this widget.

   ![](https://cdnweb.devolutions.net/docs/HUBB0001_2025_1.png)
2. ***Step 1 - From Organization***: Select from the users that are suggested, if applicable, or invite all members of a sync group from the ***Groups*** tab. Click ***Next***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub2176.png)
3. ***Step 2 - By Emails***: It is possible to invite other users that are not synced, but who belong to the same provider. Enter either an individual email or a group email, then click ***Next***.

{% hint style="info" %}
This is only possible if the enterprise application in Azure has the ***Assignment required*** set to ***No***. This setting can be found in the ***Properties*** of the enterprise application.
{% endhint %}

![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub2177.png)

4. ***Step 3 - Options***: Select ***Options*** for users, then click ***Next***.
5. ***Step 4 - User groups***: Synchronized users do not need to be assigned to the synced ***User Groups***. They will be added automatically as they log in. If you have custom ***User Groups***, you can assign them users.

{% hint style="info" %}
Custom ***User groups*** need to be defined beforehand in Devolutions Cloud. For more information, see [User Groups](https://docs.devolutions.net/cloud/web-interface/administration/management/users/).
{% endhint %}

![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub2179.png)

6. Click ***Send invite*** at the bottom.

Devolutions Cloud will send an email with essential information to the recipients, including the URL of your Devolutions Cloud, the invitation ID, and the key.

{% hint style="warning" %}
Users will be required to complete a Devolutions Account setup. See [End User Invitation Experience for SSO in Devolutions Cloud](https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/invite-users-to-devolutions-cloud-with-sso/end-user-experience/).
{% endhint %}

{% hint style="info" %}
The recipient will be part of your Devolutions Cloud instance only when they connect to it for the first time. Only then will you be able to see them in ***Administration – Users***.

Any user that tries to access your Devolutions Cloud with its URL for the first time without receiving an invitation will trigger a request approval, only if they are in the same identity provider.

An email will then be sent to all the administrators. It can be either approved or denied in ***Administration – Users***.
{% endhint %}

### Invite Users That Are Not Part of Your Authentication Provider

It is possible to add users to your Devolutions Cloud that are outside of your authentication provider.

{% hint style="info" %}
This option is only possible if you do not set a ***Force SSO on all users***, since those users are not part of your authentication provider.

Follow the steps from [Create and Invite Users](https://docs.devolutions.net/cloud/web-interface/administration/management/users/create-invite-users/).
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/invite-users-to-devolutions-cloud-with-sso.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.