new defaultSSO PR

Author: Tracey Carter

admin/authentication/SSO/sso.rst

@@ -75,6 +75,22 @@ Give your login service integration a name that your users recognize. On your cu
 this name appears in the button your users select to sign in. For example, use the name "Log in with Okta"
 for an Okta login service integration.
 
+.. raw:: html
+
+  <embed>
+    <h2>Set up default SSO role</h2>
+  </embed>
+
+
+When you set up SSO, the default role for a user signing in to Splunk Observability Cloud through SSO is the :guilabel:`power` role. You can change the default SSO role to any of the available roles in Splunk Observability Cloud.
+
+To change the default SSO role, do the following:
+
+1. Go to :guilabel:`Settings` then select :guilabel:`General Settings`.
+
+2. In the :guilabel:`Team Management` section, check the :guilabel:`Set a Default Role for SSO Login` check box, then select a role from the drop-down list. The role you select becomes the role of any new user logging in through an SSO service. You can return to :guilabel:`General Settings` and update the default role for SSO login at any time.
+
+
 .. _multiple-integrations-sso:
 
 .. raw:: html