> ## Documentation Index
> Fetch the complete documentation index at: https://docs.edplay.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# After SSO Setup: Login Behavior and Troubleshooting

> Learn what Edplay does automatically each time an employee logs in via SSO, and how to fix the most common data mapping and access issues.

Once you save your SSO field and role mappings, Edplay keeps employee accounts, roles, and course access in sync automatically on every login. This page explains what happens during each SSO sign-in and how to resolve the most common issues.

## What happens on every SSO login

<Steps>
  <Step title="Find or create the account">
    Edplay looks up the employee by their email address. If no account exists, one is created automatically.
  </Step>

  <Step title="Update profile fields">
    The employee's name and avatar are refreshed from the mapped identity provider fields (if configured in Step 1).
  </Step>

  <Step title="Assign the Workspace role">
    Edplay applies the Workspace role based on your Step 2 mapping. If the employee's group or department value does not match any mapped role, they default to **Guest**, which has minimal permissions.
  </Step>

  <Step title="Sync course and collection access">
    Edplay grants access to the courses and collections listed in the employee's SSO data, and removes access to any that are no longer listed. Access is re-evaluated on every login.
  </Step>
</Steps>

## Quick troubleshooting

<AccordionGroup>
  <Accordion title="&#x22;Save&#x22; gives an error">
    One of the required External field values in Step 1 (name, email, or role) is empty, or a row in Step 2 is missing a Workspace role. Check both steps and fill in any blank fields before saving again.
  </Accordion>

  <Accordion title="An employee only has Guest access">
    Their group or department value from the identity provider is not mapped in Step 2. Open the role mapping, find the unmapped value, and add the correct Workspace role for it.
  </Accordion>

  <Accordion title="Avatars aren't showing up">
    Confirm the **Avatar** row's External field matches the exact attribute name your identity provider uses for photo URLs. Even a small typo will prevent avatars from syncing.
  </Accordion>

  <Accordion title="Course access isn't updating">
    Check that the Courses or Collections row's External field matches the exact attribute name from your identity provider. Edplay only syncs access from fields that are explicitly mapped.
  </Accordion>
</AccordionGroup>

## Related articles

* [SSO Configuration](/sso/sso-configuration)
* [Data Mapping](/sso/data-mapping)
* [Map User Fields](/sso/map-user-fields)
* [Map Roles](/sso/map-roles)