Configure default groups for Google SSO users

Summary

Goal: Automatically assign new Google SSO users to a specific permissions group upon first login.

Configuration Steps

Step 1: Identify target group

Determine which custom permissions group new SSO users should join.

Step 2: Request domain mapping

Contact Braintrust support with your domain (e.g., company.com) and target group name to configure the domain mapping.

Step 3: Verify configuration

Have a new user (not already in your organization) sign in via Google SSO and confirm they are automatically added to the specified group.

Important Notes

• Domain mapping only affects new users on first sign-in

• Existing organization members are not affected by this configuration

• The custom permissions group must exist before mapping is configured