Salesforce auto-provisioning keys off the full Salesforce user list, which is far larger than the Chili Piper user base (one customer has ~2,000 SFDC users vs. ~700 in Chili Piper). Run as-is, it bulk-adds people who shouldn't have access and consumes licenses. There's also no native "is a Chili Piper user" field on the Salesforce user object to key off, so scoping today requires a custom boolean checkbox field. Give admins control over what auto-provisioning does: an assign-only mode that updates license, team, and workspace for users already in Chili Piper without creating new ones, plus the ability to scope creation to a filtered subset (criteria, report, tag, or a boolean field on the user object). Access is often an approval-based human decision, not cleanly team-defined, so all-or-nothing provisioning either floods the instance with unauthorized users and wasted licenses or forces manual provisioning that doesn't scale. Past provisioning gaps have caused real damage for this account (a user wrongly assigned as admin, a sandbox mess that took days to fix).