Remove shortcode file

Author: sarahsanders-docker

content/manuals/security/for-admins/single-sign-on/manage.md

@@ -54,9 +54,35 @@ aliases:
 
 ## Manage users
 
-{{< include "admin-early-access.md" >}}
+> [!IMPORTANT]
+>
+> SSO has Just-In-Time (JIT) Provisioning enabled by default unless you have [disabled it](/security/for-admins/provisioning/just-in-time/#sso-authentication-with-jit-provisioning-disabled). This means your users are auto-provisioned to your organization.
+>
+> You can change this on a per-app basis. To prevent auto-provisioning users, you can create a security group in your IdP and configure the SSO app to authenticate and authorize only those users that are in the security group. Follow the instructions provided by your IdP:
+>
+> - [Okta](https://help.okta.com/en-us/Content/Topics/Security/policies/configure-app-signon-policies.htm)
+> - [Entra ID (formerly Azure AD)](https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-restrict-your-app-to-a-set-of-users)
+>
+> Alternatively, see [Manage how users are provisioned](/manuals/security/for-admins/single-sign-on/manage.md).
+
+
+### Add guest users when SSO is enabled
+
+To add a guest that isn't verified through your IdP:
+
+1. Sign in to the [Admin Console](https://app.docker.com/admin).
+2. Select **Organizations**, your organization, and then **Members**.
+3. Select **Invite**.
+4. Follow the on-screen instructions to invite the user.
+
+### Remove users from the SSO company
+
+To remove a user:
 
-{{% admin-sso-management-users product="admin" %}}
+1. Sign in to [Admin Console](https://app.docker.com/admin).
+2. Select **Organizations**, your organization, and then **Members**.
+3. Select the action icon next to a user’s name, and then select **Remove member**, if you're an organization, or **Remove user**, if you're a company.
+4. Follow the on-screen instructions to remove the user.
 
 ## Manage provisioning