Confirm availability
Contact the Message team with your identity provider and the provisioning workflow you need. Do not assume every SAML provider or SCIM operation is enabled for every account.
Describe the intended access
List who should be able to sign in, which roles they need and how access should be removed when someone leaves. Keep workspace authorization separate from authenticating the person.
Plan the test
For an agreed setup, test sign-in, a user without access, role assignment and removal of access. Keep an approved administrative recovery path available during the rollout.
Keep going
Put the next step into practice, or ask us about your setup.