# Map SSO IdP group to balena team

**URL:** <https://forums.balena.io/t/map-sso-idp-group-to-balena-team/373561>\
**Category:** Feature Requests\
**Created:** [February 8, 2025, 12:37am UTC](https://forums.balena.io/t/map-sso-idp-group-to-balena-team/373561 "2025-02-08T00:37:26Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kb2ma](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/kb2ma/32/7618_2.png) [@kb2ma](https://forums.balena.io/u/kb2ma)\
**Post date:** [February 8, 2025, 12:37am UTC](https://forums.balena.io/t/map-sso-idp-group-to-balena-team/373561/1 "2025-02-08T00:37:26Z")

</div>

It would be useful to set up an automatic mapping from a specific SSO identity provider group to a balena team. Then when a new enterprise SSO user authenticates to balena, they automatically become a member of that team.

We already have the ability to assign a per-organization default balena team to a new user ([docs](https://docs.balena.io/learn/accounts/enterprise-sso/#optional-configure-a-default-team)). This feature provides the ability to assign a balena _team_ in the organization based on one or more SSO IdP _groups_ the user belongs to.