diff --git a/src/pages/docs/platform/account/sso.mdx b/src/pages/docs/platform/account/sso.mdx
index 31388d71db..e9d969d7ec 100644
--- a/src/pages/docs/platform/account/sso.mdx
+++ b/src/pages/docs/platform/account/sso.mdx
@@ -16,6 +16,10 @@ Any SAML-compatible identity provider can be used to enable SSO.
 
 The following instructions are examples of configuring SSO with [Okta](#okta) and [Google Workspace](#google).
 
+<Aside data-type='note'>
+When a user signs in via SSO for the first time, Ably uses just-in-time (JIT) provisioning to automatically create their account. The `first_name` and `last_name` attributes are used to set the user's display name. If they are missing or empty, provisioning will fail and the user won't be able to sign in. This does not apply if you are using SCIM to provision users.
+</Aside>
+
 ### Okta <a id="okta"/>
 
 To enable SSO using [Okta](https://www.okta.com/) as the identity provider, configure the following properties in your Ably account dashboard and your Okta account: