default permissions to apply to new users over SSO

New users that are provisioned through SSO are not granted access even though default permissions are set to reviewer or Viewer

manual management of users to grant access, no bulk permission option so i have to touch each user manually

make it honor the defaults. i set it up so it would so why doesn't sso set them.