What access do new SSO users receive?

By default, newly created SSO users are assigned the Contributor role with write access.

This means that any project configured to be visible to everyone in your organisation can be accessed by all users who sign in through SSO. If you need more granular access control, you can manage project permissions after the user account has been created.