Copy the identity metadata link into your workspace authentication settings and enable automatic user provisioning.