Add docs for managed users

_toc.yml

@@ -67,9 +67,9 @@ entries:
   - file: docs/platform/howto/list-user
     title: User and access management
     entries:
-    - file: docs/platform/howto/managed-users
     - file: docs/platform/howto/manage-org-users
       title: Invite and remove organization users
+    - file: docs/platform/concepts/managed-users
     - file: docs/platform/howto/list-user-profile
       entries:
       - file: docs/platform/howto/edit-user-profile
@@ -80,6 +80,7 @@ entries:
       - file: docs/platform/reference/password-policy
       - file: docs/platform/howto/user-2fa
       - file: docs/platform/howto/set-authentication-policies
+        title: Set authentication policies
       - file: docs/platform/concepts/authentication-tokens
       - file: docs/platform/howto/create_authentication_token
       - file: docs/platform/howto/list-saml

docs/platform/concepts/managed-users.rst

@@ -0,0 +1,10 @@
+Managed users 
+==============
+
+The managed users feature provides a centralized way of managing all of your organization's users, including editing their profiles, resetting passwords, and :doc:`setting authentication policies </docs/platform/howto/set-authentication-policies>`.
+
+When you :doc:`verify a domain </docs/platform/howto/manage-domains>`, existing organization users automatically become managed users. New users can be provisioned and managed through your identity provider (IdP). 
+
+A managed user cannot create new organizations unless they are a super admin of the organization that they are managed by. They are also not allowed to edit their user profiles.
+
+To see a list of all users in your organization go to **Admin** and select **Users**.

docs/platform/howto/set-authentication-policies.rst

@@ -1,16 +1,23 @@
-Set authentication policies for managed users 
-==============================================
+Set authentication policies for organization users 
+===================================================
 
+The authentication policy for your organization specifies the ways that users can access your organization on the Aiven platform. 
+
+You can, for example, restrict organization users to using single sign-on through a :doc:`verified domain </docs/platform/howto/manage-domains>`. Alternatively, you can allow them to create a password or use third-party authentication providers like Google, Microsoft, and GitHub. For an added layer of security, you can enforce two-factor authentication for password logins.
+
+:doc:`Managed users </docs/platform/concepts/managed-users>` cannot log in with disabled authentication methods. Users that are not managed can log in with disabled methods, but they won't have access to the organization if they do.
 
 Set an authentication policy 
 ------------------------------
 
 To set an authentication policy for all users in an organization:
 
-#. Click **Admin**.
+#. In the organization, click **Admin**.
 
 #. Click **Authentication**.
 
-#.  
+#. Click the toggle for each authentication method that you want to allow. 
+
+#. Click **Save changes**.