Provision Dynamic Account node
Not supported in Advanced Identity Cloud
Provision an account following successful authentication by a SAML2 authentication node or the Social Provider Handler node.
Accounts are provisioned using properties defined in the attribute mapper configuration of a social authentication or SAML2 authentication node earlier in the flow.
If a password has been acquired from the user, for example, by using the Platform Password node, it is used when provisioning the account; otherwise, a 20-character random string is used.
In addition to retrieving the password from the node state, the Provision Dynamic Account node
gets the realm value, and attributes and userNames from userInfo in the shared state.
It sets the username attribute in the node’s shared state.
Example
In this example, the node lets users who have performed social authentication using Google provide a password and provision an account if they don’t have a matching existing profile. They must enter a one-time passcode to verify they are the owner of the Google account.