Hello! Newbie here, just getting familiar with Ory and the community. I want to figure out how to administratively create an account for a user signing through SSO. I have a SaaS app that requires invitations to the platform. If the user doesn't already exist in the system, I can create an email/password login but the same for SSO doesn't seem documented. The closest seems to be this section on Pre-provisioning identities in an organization but it doesn't reference how to accomplish the user creation.

Do you have the

sub

claim that the provider returns. If you do, you can create the identity through the API and set its OIDC credential config.

Potentially. We're working in Azure to start. I'll have to see if that's something we can re-use from the inviting user.

https://www.ory.sh/docs/reference/api#tag/identity/operation/createIdentity And then use

oidc

credential config, it should use the provider id from your config, and the subject that the provider will return during the login (typically not the email address!)

Awesome! This seems like a better start than what I had. Thank you!