> ## Documentation Index
> Fetch the complete documentation index at: https://braintrust.dev/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure default groups for Google SSO users

export const plans_0 = "Enterprise"

export const deployments_0 = "Braintrust-hosted"

export const data_plane_version_0 = undefined

export const use_case_0 = undefined

<Note>
  **Applies to:**

  * Plan - {plans_0}
  * Deployment - {deployments_0}
  * {data_plane_version_0}
  * {use_case_0}
</Note>

## Summary

**Goal:** Automatically assign new Google SSO users to a specific permissions group upon first login.

**Features:** Domain mapping, Google SSO authentication, custom permissions groups.

## Configuration Steps

### Step 1: Identify target group

Determine which custom permissions group new SSO users should join.

### Step 2: Request domain mapping

Contact Braintrust support with your domain (e.g., company.com) and target group name to configure the domain mapping.

### Step 3: Verify configuration

Have a new user (not already in your organization) sign in via Google SSO and confirm they are automatically added to the specified group.

## Important Notes

* Domain mapping only affects new users on first sign-in
* Existing organization members are not affected by this configuration
* The custom permissions group must exist before mapping is configured