Yes, technically you can still send invitations via user management—but you shouldn't!
When SSO is active, you should always assign new users via your own AD/IdP (e.g., Entra) to ensure SSO login works.
Why not use user management?
An invitation sent via user management prompts the user to set a password.
The user can then log in using their email address and password. This creates a local (secondary) account rather than an SSO account.
Result: Duplicate profiles (one SSO profile and one local profile) → confusion and additional maintenance overhead.
Special case: "SSO mandatory" enabled
You can still send invitations via user management.
However, logging in via username/password is disabled.
The invitation is effectively useless, and the user must log in via SSO.
Here’s how to do it correctly:
Assign the user in the AD/IdP (e.g., add the softgarden app in Entra).
Set groups/roles correctly (for tenant/role; optional).
The user logs in via SSO.