---
title: Provision Dynamic Account node
description: Provision an account following successful authentication by a SAML2 authentication node or the Social Provider Handler node.
component: auth-node-ref
version: 7.3
page_id: auth-node-ref::am-only/auth-node-provision-dynamic-account
canonical_url: https://docs.pingidentity.com/auth-node-ref/7.3/am-only/auth-node-provision-dynamic-account.html
section_ids:
  outcomes: Outcomes
  properties: Properties
  example: Example
---

# Provision Dynamic Account node

Provision an account following successful authentication by a SAML2 authentication node or the [Social Provider Handler node](../auth-node-social-provider-handler.html).

Accounts are provisioned using properties defined in the attribute mapper configuration of a social authentication or SAML2 authentication node earlier in the flow.

If a password has been acquired from the user, for example, by using the [Password Collector node](auth-node-password-collector.html), it is used when provisioning the account; otherwise, a 20 character random string is used.

In addition to retrieving the password from the node state, the [Provision Dynamic Account node](auth-node-provision-dynamic-account.html) gets the `realm` value, and `attributes` and `userNames` from `userInfo` in the shared state. It sets the `username` attribute in the node's shared state.

## Outcomes

Single outcome path.

## Properties

| Property         | Usage                                                                                                                                                             |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account Provider | Specifies the name of the class that implements the account provider.Default: `org.forgerock.openam.authentication.modules.common.mapping.DefaultAccountProvider` |

## Example

The following example uses this node to let users who have performed social authentication using Google provide a password and provision an account if they do not have a matching existing profile. They must enter a one-time password to verify they are the owner of the Google account.

![Dynamic account provisioning in context](../_images/trees-node-Google-DynamicAccountCreation-example.png)