Merge pull request #3336 from ably/docs/sso-jit-provisioning-context-1776185474-1776185986

Docs: Add JIT provisioning context to SSO first_name/last_name requirement

Author: m-hulbert

src/pages/docs/platform/account/sso.mdx

@@ -16,6 +16,10 @@ Any SAML-compatible identity provider can be used to enable SSO.
 
 The following instructions are examples of configuring SSO with [Okta](#okta) and [Google Workspace](#google).
 
+<Aside data-type='note'>
+When a user signs in via SSO for the first time, Ably uses just-in-time (JIT) provisioning to automatically create their account. The `first_name` and `last_name` attributes are used to set the user's display name. If they are missing or empty, provisioning will fail and the user won't be able to sign in. This does not apply if you are using SCIM to provision users.
+</Aside>
+
 ### Okta <a id="okta"/>
 
 To enable SSO using [Okta](https://www.okta.com/) as the identity provider, configure the following properties in your Ably account dashboard and your Okta account: