---
title: Provision Dynamic Account node
description: Not supported in Advanced Identity Cloud
component: auth-node-ref
version: latest
page_id: auth-node-ref:am-only:provision-dynamic-account
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/am-only/provision-dynamic-account.html
page_aliases: ["auth-node-provision-dynamic-account.adoc"]
superseded_by: https://docs.pingidentity.com/auth-node-ref/latest/am-only/provision-dynamic-account.html
section_ids:
  example: Example
  availability: Availability
  outcomes: Outcomes
  configuration: Configuration
---

# Provision Dynamic Account node

Not supported in Advanced Identity Cloud

Provision an account following successful authentication by a SAML2 authentication node or the [Social Provider Handler node](../social-provider-handler.html).

Accounts are provisioned using properties defined in the attribute mapper configuration of a social authentication or SAML2 authentication node earlier in the flow.

If a password has been acquired from the user, for example, by using the [Platform Password node](../platform-password.html), it is used when provisioning the account; otherwise, a 20-character random string is used.

In addition to retrieving the password from the node state, the [Provision Dynamic Account node](provision-dynamic-account.html) gets the `realm` value, and `attributes` and `userNames` from `userInfo` in the shared state. It sets the `username` attribute in the node's shared state.

## Example

In this example, the node lets users who have performed social authentication using Google provide a password and provision an account if they don't have a matching existing profile. They must enter a one-time passcode to verify they are the owner of the Google account.

![Dynamic account provisioning in context](_images/trees-node-Google-DynamicAccountCreation-example.png)

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | No         |
| PingAM (self-managed)                 | Yes        |
| Ping Identity Platform (self-managed) | No         |

## Outcomes

Single outcome path.

## Configuration

| Property         | Usage                                                                                                                                                             |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account Provider | Specifies the name of the class that implements the account provider.Default: `org.forgerock.openam.authentication.modules.common.mapping.DefaultAccountProvider` |