---
title: Provision Dynamic Account node
description: Provision an account following successful authentication by a SAML2 authentication node or the Social Provider Handler node.
component: auth-node-ref
version: 8
page_id: auth-node-ref::am-only/provision-dynamic-account
canonical_url: https://docs.pingidentity.com/auth-node-ref/8/am-only/provision-dynamic-account.html
page_aliases: ["auth-node-provision-dynamic-account.adoc"]
section_ids:
  availability: Availability
  outcomes: Outcomes
  properties: Properties
  example: Example
---

# Provision Dynamic Account node

Provision an account following successful authentication by a SAML2 authentication node or the [Social Provider Handler node](../social-provider-handler.html).

Accounts are provisioned using properties defined in the attribute mapper configuration of a social authentication or SAML2 authentication node earlier in the flow.

If a password has been acquired from the user, for example, by using the [Password Collector node](password-collector.html), it is used when provisioning the account; otherwise, a 20 character random string is used.

In addition to retrieving the password from the node state, the [Provision Dynamic Account node](provision-dynamic-account.html) gets the `realm` value, and `attributes` and `userNames` from `userInfo` in the shared state. It sets the `username` attribute in the node's shared state.

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | No         |
| PingAM (self-managed)                 | Yes        |
| Ping Identity Platform (self-managed) | No         |

## Outcomes

Single outcome path.

## Properties

| Property         | Usage                                                                                                                                                             |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account Provider | Specifies the name of the class that implements the account provider.Default: `org.forgerock.openam.authentication.modules.common.mapping.DefaultAccountProvider` |

## Example

The following example uses this node to let users who have performed social authentication using Google provide a password and provision an account if they do not have a matching existing profile. They must enter a one-time passcode to verify they are the owner of the Google account.

![Dynamic account provisioning in context](../_images/trees-node-Google-DynamicAccountCreation-example.png)