# Connected organizations > Depth-first rabbithole dossier for Connected organizations; source-anchored research pack. Parent: [Atlas Federated Authentication](https://llms-explorer.com/tree/atlas-federated-authentication/) · 3 facets · 14 facts · page: https://llms-explorer.com/tree/connected-organizations/ ## Definitions - [low] Atlas displays all organizations where you are an Organization Owner, and organizations not already connected to the Federation Application have a Configure Access button in the Actions column. Sources: https://www.mongodb.com/docs/atlas/security/federated-auth-azure-ad.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [medium] If the identityProviderId field is not provided, you will disconnect the organization and the identity provider, and currently connected data access identity providers missing from the dataAccessIdentityProviderIds field will be disconnected. Sources: https://www.mongodb.com/docs/atlas/cli/current/command/atlas-api-federatedAuthentication-updateConnectedOrgConfig.md, https://www.mongodb.com/docs/atlas/operator/current/atlasfederatedauth-custom-resource.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` ## How it works - [high] When you map organizations to your Identity Provider, Atlas grants users who authenticate through the IdP membership in the selected organizations. Sources: https://www.mongodb.com/docs/atlas/security/manage-org-mapping.md, https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-MongoDB-Cloud.html — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] Atlas disables AI client connections by default for existing organizations and for new organizations existing Atlas users create, but enables AI client access by default for an organization that a brand new user creates during sign-up when the user doesn't have an existing Atlas account. Sources: https://www.mongodb.com/docs/atlas/app-connections.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] When an Organization Owner disables AI client access for the organization, control-plane access is revoked immediately for every AI client connected to the organization. Sources: https://www.mongodb.com/docs/atlas/app-connections.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#troubleshooting` ## Facts and statements - [low] Atlas adds invited federated users directly to organizations and projects as active members without an invitation if the user's email belongs to a verified domain mapped to an active IdP configuration and the organization is connected to the federation through that same IdP configuration. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] Users in your federation with the Organization Owner role can still create new organizations, which are automatically connected to your federation. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] Atlas grants users who log in through the IdP (Identity Provider) access to mapped Atlas organizations. Sources: https://www.mongodb.com/docs/atlas/security/federated-authentication.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [medium] To manage federated authentication, you must have Organization Owner access to one or more organizations that are delegating federation settings to the instance. Sources: https://www.mongodb.com/docs/atlas/security/federated-authentication.md, https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md, https://www.mongodb.com/docs/atlas/security/manage-domain-mapping.md, https://www.mongodb.com/docs/atlas/security/manage-org-mapping.md, https://www.mongodb.com/docs/atlas/security/manage-federated-auth.md, https://www.mongodb.com/docs/atlas/security/federated-auth-okta. — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] You can prevent users in your Federated Authentication instance from creating new organizations or using their credentials to access organizations outside of the federation, a setting that applies to the entire federation including all Identity Providers and Organizations. Sources: https://www.mongodb.com/docs/atlas/security/federation-advanced-options.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] Atlas supports a maximum of two Workforce IdPs connected to an organization: one OIDC IdP for database access and one SAML IdP for UI access. Sources: https://www.mongodb.com/docs/atlas/security/manage-org-mapping.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] You can apply the same IdP (Identity Provider) to multiple organizations, but you can assign each organization a single IdP. Sources: https://www.mongodb.com/docs/atlas/security/manage-org-mapping.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] In the Apply Identity Provider to Organizations modal, you select the organizations to which this IdP applies, and in the list of Organizations, you ensure that your desired organizations have the expected Identity Provider. Sources: https://www.mongodb.com/docs/atlas/security/federated-auth-azure-ad.md — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` - [low] In the sidebar menu, navigate to FEDERATION → Organizations to open your organization page. Sources: https://duo.com/docs/sso-mongodb-atlas-uia — source: `~/.global-ai-hub/research/.pipeline/mongodb-2026-10-14/frb/connected-organizations-0f7a496a8f/rabbithole-synthesis.md#core` ## Related concepts - organizations — is a part of Connected organizations - Connected — is a part of Connected organizations