* '''Create New User on No Match''' - create new user when no matching is found and will allow login for new user upon successful authentication
* '''Create New Organization on No Match''' - create new parent organization when no matching organization is found
* '''Enable Updates To User Role''' - allow the SSO assertion to change user's system rolefor new created users and not for existing users
* '''Enable Updates To User Organization''' - allow the SSO assertion to change user's parent organization