Configuring AD for SAML SSO
Resolve Actions Express allows you to enable individual AD users or entire AD groups to log in using SSO. However, it is recommended to use groups in your AD to manage who can use SSO with Actions Express. As explained in Synchronizing with AD and Enabling Recipients to Log In, you need to convert each recipient group or user to a login manually, which could make for a time-consuming task if you are synchronizing more than a handful of users. With a group, you can convert multiple users in a single step.
In addition, using groups allows you to more flexibly manage new users without having to run regular synchronizations.