docs(sso): document SSO provisioning group configuration (lt-docs)

docs/lambdatest-sso-manage-connection.md

@@ -65,6 +65,27 @@ Before proceeding you need to navigate to <a href="https://accounts.lambdatest.c
 2. Check the toggle for the users you want to exempt from SSO login
    <img loading="lazy" src={require('../assets/images/sso-self-serve/exempt-users-toggle.png').default} alt="sso-self serve" width="945" height="542" className="doc_img"/>
 
+### Assign a Group to SSO-Provisioned Users
+By default, users signing in through SSO for the first time (Just-in-Time provisioning) are added to your organization's **Default group**. If your organization uses **Groups**, you can assign these users to a specific group instead — for example, to apply that group's concurrency limits to everyone who signs in through SSO. The group currently used for SSO provisioning is marked with an **SSO group** badge on the **Groups** page.
+
+You can set it from either place:
+
+<h4>From the Groups page</h4>
+
+1. Open the **Members** tab and go to **Groups**.
+2. Click the **⋯** menu on the group you want, then select **Make SSO group**.
+   <img loading="lazy" src={require('../assets/images/sso-self-serve/sso-provision-group-make-sso.png').default} alt="Make SSO group option in the group actions menu" width="945" height="486" className="doc_img"/>
+3. The group is now marked with an **SSO group** badge.
+   <img loading="lazy" src={require('../assets/images/sso-self-serve/sso-provision-group-badge.png').default} alt="Group marked with the SSO group badge" width="945" height="486" className="doc_img"/>
+
+<h4>From the SSO settings page</h4>
+
+1. Open the **Security** tab and go to **SSO**.
+2. Under **Default group assigned to new SSO users**, select a group from the dropdown. Your selection is saved automatically.
+   <img loading="lazy" src={require('../assets/images/sso-self-serve/sso-provision-group-dropdown.png').default} alt="Default group assigned to new SSO users dropdown on the SSO settings page" width="945" height="486" className="doc_img"/>
+
+**Note:** This option is available only when **Groups** are enabled for your organization. If no group is selected, SSO-provisioned users are added to your **Default group**. A group that is currently set as the SSO provisioning group can't be deleted — assign a different group first.
+
 That's all you need to know for Managing <BrandName /> SSO Integration. In case you have any questions please feel free to reach out to us via the <span className="doc__lt" onClick={() => window.openLTChatWidget()}>**24/7 chat support**</span> or email us over [support@testmuai.com](mailto:support@testmuai.com).
 
 <nav aria-label="breadcrumbs">

docs/lambdatest-sso-self-serve.md

@@ -90,6 +90,8 @@ Once configured, click on continue
 7. Once the connection is created, you will be redirected to the SSO settings page. From here you can <a href="/support/docs/testmu-sso-manage-connection/">Manage SSO Connection</a>.
    <img loading="lazy" src={require('../assets/images/sso-self-serve/edit-connection.png').default} alt="sso-self serve" width="945" height="542" className="doc_img"/>
 
+8. If your organization uses **Groups**, you can choose which group new SSO users are added to from the SSO settings page. See <a href="/support/docs/testmu-sso-manage-connection/#assign-a-group-to-sso-provisioned-users">Assign a Group to SSO-Provisioned Users</a>.
+
 
 That's all you need to know for Configuring <BrandName /> SSO Integration Using SAML. In case you have any questions please feel free to reach out to us via the <span className="doc__lt" onClick={() => window.openLTChatWidget()}>**24/7 chat support**</span> or email us over [support@testmuai.com](mailto:support@testmuai.com).