Add documentation for managed users

_toc.yml

@@ -68,6 +68,8 @@ entries:
     title: User and access management
     entries:
     - file: docs/platform/howto/manage-org-users
+      title: Invite and remove organization users
+    - file: docs/platform/concepts/managed-users
     - file: docs/platform/howto/list-user-profile
       entries:
       - file: docs/platform/howto/edit-user-profile
@@ -77,6 +79,7 @@ entries:
       - file: docs/platform/howto/add-authentication-method
       - file: docs/platform/reference/password-policy
       - file: docs/platform/howto/user-2fa
+        title: Set authentication policies
       - file: docs/platform/concepts/authentication-tokens
       - file: docs/platform/howto/create_authentication_token
       - file: docs/platform/howto/list-saml

docs/platform/concepts/managed-users.rst

@@ -0,0 +1,10 @@
+Managed users 
+==============
+
+The managed users feature provides a centralized way of managing all of your organization's users, including editing their profiles, resetting passwords, and :doc:`setting authentication policies </docs/platform/howto/set-authentication-policies>`.
+
+When you :doc:`verify a domain </docs/platform/howto/manage-domains>`, existing organization users automatically become managed users. New users can be provisioned and managed through your identity provider (IdP). 
+
+A managed user cannot create new organizations unless they are a super admin of the organization that they are managed by. They are also not allowed to edit their user profiles.
+
+To see a list of all users in your organization go to **Admin** and select **Users**.