Adding Default User Groups within SSO Identity Provider - Adding Default User Groups within SSO Identity Provider - When using a corporate identity provider (e.g., Okta) for Single Sign-On, an administrator may manage default user groups directly within the identity provider server. This topic describes how to ensure that CIC user group assignments synchronize with the corporate identity provider. - Content Innovation Cloud - Hyland for Guidewire BillingCenter - Current/Hyland-for-Guidewire-BillingCenter/gcp1773151750260 - Current - Current

When using a corporate identity provider (e.g., Okta) for Single Sign-On, an administrator may manage default user groups directly within the identity provider server. This topic describes how to ensure that CIC user group assignments synchronize with the corporate identity provider.

1. Within the corporate identity provider, create the following user groups. For more information on creating user groups, refer to your corporate identity provider's documentation.
   • Guidewire BC Content Users
   • Guidewire BC Doc Security - Confidential
   • Guidewire BC Doc Security - Unrestricted
   • Guidewire BC Doc Security - Internal Only
2. Within the corporate identity provider, add all applicable users to the new user groups.
3. Log in to the the CIC Administration Portal and ensure that the corresponding user groups with the same name are marked as External. For more information, see the Content Innovation Cloud Administration Portal documentation.
   The next time a user logs in, their user group assignment within CIC will be synchronized with what is configured within the corporate identity provider.

   Tip: It is recommended to set the Guidewire BC Solution Administrators user groups to Internal and administer that user group exclusively within the CIC Administration Portal.