Models and rights

The SSO has three main models:

user profile
Basically users that log in.
organisation
Only used to have a name and ID for organisations. It has nothing to do with users and portals whatsoever.
portal
A portal that’s using the SSO. You need SSO admin access to add one. Used to protect the traffic between portal and SSO.

User profile

Users can be created via the API by a portal. They then get an email with an activation link to set their password.