Update SSO documentation for self-service setup

- Add step-by-step guide for SSO setup process
- Document "Manage SSO Connection" button functionality
- Add section on managing SSO connection after setup
- Link to collaborators doc for group mapping details
- Update structure to reflect self-service workflow

Author: polmiro

docs/welcome/set-up-revenuecat/security.md

@@ -59,16 +59,48 @@ To disable two-factor authentication vavigate to your [**Account > Security**](h
 If you are a collaborator on a Project that requires two-factor authentication, you must leave that project before disabling.
 :::
 
-### Activating Single Sign-On
+### Setting Up Single Sign-On
 
 :::info Enterprise Only
 At this time, Single Sign-On is only available for customers on an [Enterprise plan](https://www.revenuecat.com/pricing/)
 :::
 
-To enable Single Sign-On for your organization navigate to your [**Account > Security > SSO**](https://app.revenuecat.com/settings/security/sso) and click **Activate SSO**.
+To set up Single Sign-On for your organization:
 
-![Collaborators](/images/0c8723-revenuecat-sso-activate.png)
+#### 1. Configure Your Identity Provider
+
+Navigate to your [**Account > Security > SSO**](https://app.revenuecat.com/settings/security/sso) settings and click **Manage SSO Connection**.
+
+This will open the WorkOS Admin Portal where you can configure your SAML or OIDC identity provider settings.
+
+![Manage SSO Connection](/images/0c8723-revenuecat-sso-activate.png)
+
+Configure your identity provider details and test the connection in the WorkOS portal. Once complete, you'll be redirected back to the RevenueCat Dashboard.
+
+#### 2. Set Up Directory Synchronization
+
+Configure SCIM provisioning with your identity provider to synchronize user directories and groups.
+
+#### 3. Configure Group Mappings
+
+Map your SSO groups to RevenueCat roles for each project. See [Single Sign-On Collaborators](/projects/collaborators#single-sign-on-collaborators) for detailed instructions on configuring group mappings.
+
+#### 4. Activate SSO
+
+Once you've completed the SSO connection setup, directory synchronization, and role mappings, navigate to [**Account > Security > SSO**](https://app.revenuecat.com/settings/security/sso) and click **Activate SSO**.
 
 :::warning Members of the domain will only be able to use SSO
-When the SSO of your organizations is active users with the domain of your organization will be required to sign in using SSO.
+When the SSO of your organization is active, users with the domain of your organization will be required to sign in using SSO.
 :::
+
+### Managing Your SSO Connection
+
+After initial setup, you can manage your SSO connection settings at any time by clicking **Manage SSO Connection** from [**Account > Security > SSO**](https://app.revenuecat.com/settings/security/sso).
+
+This allows you to:
+- Update identity provider configuration
+- Modify SAML or OIDC settings
+- Test your SSO connection
+- View connection status
+
+Changes made in the WorkOS Admin Portal are saved automatically and may take a few moments to reflect in the RevenueCat Dashboard.