We have been using SSO: EntraID for all logins and it is working smoothly. However, we control server access by tagged servers so the first time a user logs in they have no access to view servers.
We created a standard tag for most people to use and would it would be great if all new SSO users were assigned a default tag.