For tenants using SSO, we now support optional just-in-time provisioning of user accounts (as well as team memberships, roles, and tenant owner status). Once enabled, users who are present in specific groups in your remote SAML or OIDC identity provider can sign into your tenant without needing to be invited first. Read more and see setup information in the docs.