Enable generation of user tokens
Create a user group "crowd-users"
Add this user group to the "Crowd" application
Add your IDP in the SAML configuration
Configure the SAML Authentication
- Add "crowd-users" to the "Default usergroup(s)"
- Enable "Create user"