# Invite Users via Identity Providers

As an Admin Member, there are [**two invitation methods**](/crystal-console/users/invite-users-to-crystal.md) that you can use to invite Users to Crystal: manual or via Identity Provider.

This guide focuses on the **invitation via IDP** method (you can read about the alternative method [here](/crystal-console/users/invite-users-to-crystal/how-to-invite-users.md)).

Let's see how to do it.

{% hint style="warning" %} <mark style="color:orange;">**Remember**</mark>

As viewing [permissions](/crystal-console/users/manage-permissions.md) are inherited from Groups, after the invitation process don't forget to *also* *add the invited Users to one or more* *Groups* in order to grant them viewing permissions to data - otherwise they won’t be able to talk to Crystal on the first access.
{% endhint %}

## Choose Identity Provider

You have two possible Identity Providers (IDPs) to choose from:

* **Microsoft IDP**: this option will enable Users to log in with their company's Microsoft credentials
* **Google IDP**: this option will enable Users to log in with their company's Google credentials

{% hint style="info" %} <mark style="color:blue;">**Please Note**</mark>

Both Identity Providers can be enabled at the same time if needed.
{% endhint %}

## Set Up Identity Provider

To be able to invite Users via Identity Provider, *the Identity Provider must be enabled on Crystal first*!

Let's see how to do it in the dedicated tutorials!

***

### Jump to Section

{% content-ref url="/pages/OZGH6AfTl1m8OdR6lVdg" %}
[Enable the Microsoft Identity Provider](/crystal-console/users/invite-users-to-crystal/invite-users-via-identity-providers/microsoft-azure.md)
{% endcontent-ref %}

{% content-ref url="/pages/ojtnw3u2IjRNTOGTPwRg" %}
[Enable the Google Identity Provider](/crystal-console/users/invite-users-to-crystal/invite-users-via-identity-providers/enable-the-google-identity-provider.md)
{% endcontent-ref %}

***

## Invite Users via Identity Provider

Once the Identity Provider has been successfully enabled on Crystal, you’ll be capable to invite *Users* via the Google or Azure Workspace, like this:

1. go to the Section *"People"* and click on *"Invite People"*

<figure><img src="/files/gWDbaw58HBlv688GROhH" alt=""><figcaption><p>Invite People</p></figcaption></figure>

2. choose the option *"Import from Google Workspace"* or *"Import from Azure"* - based on which ones you have enabled

<figure><img src="/files/u4OM978llx3DmBG9oNdv" alt="" width="563"><figcaption><p>Import from IDP</p></figcaption></figure>

3. select the Users from the list that opens up

<figure><img src="/files/kn9lTRdka4mKuOb3fAoV" alt=""><figcaption><p>Select Users</p></figcaption></figure>

4. choose the role for the User

<details>

<summary>Crystal Roles</summary>

Remember that **Member Users** are the ones who can access the *Crystal Advisor only*, whereas **Admin Users** can access *both the Advisor and the Console*.

To know more about Crystal Users' roles, check [this article](/fundamentals/crystal.md).

</details>

<figure><img src="/files/eWbtqzCBuSApcBmM0T1C" alt="" width="432"><figcaption><p>Assign Role</p></figcaption></figure>

At this point, everything is set!

The Users you invited will be capable to perform the [Login](/crystal-advisor/access-to-crystal/log-in-1.md) without creating a Crystal Account, but using their existing Google or Microsoft emails instead.

<figure><img src="/files/tODzfmcH5N3b4EO9fE2B" alt=""><figcaption><p>Login via Identity Provider</p></figcaption></figure>

{% hint style="info" %} <mark style="color:blue;">**Please Note**</mark>

Identity Providers can also be used to [*create new Groups*](/crystal-console/users/user-groups.md).
{% endhint %}

***


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.igenius.ai/crystal-console/users/invite-users-to-crystal/invite-users-via-identity-providers.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.