It would be great to have the ability to configure the default role that is assigned to new users that sign in via SSO. Currently, it defaults to "Viewer" by default. This could be handled through a configuration on the SSO config page that allows you to select between "Viewer", "Draft Writer", "Collaborator" and "Administrator".