---
title: User management
description: The Workplace from Facebook Provisioner synchronizes users from your datastore to Workplace from Facebook. The following describes the behavior of each provisioning capability.
component: facebook
page_id: facebook:workplace_from_facebook_provisioner:pf_workplace_connector_user_management
canonical_url: https://docs.pingidentity.com/integrations/facebook/workplace_from_facebook_provisioner/pf_workplace_connector_user_management.html
revdate: June 11, 2024
section_ids:
  synchronizing-existing-users: Synchronizing existing users
  user-provisioning: User provisioning
  user-updates: User updates
  user-deprovisioning: User deprovisioning
---

# User management

The Workplace from Facebook Provisioner synchronizes users from your datastore to Workplace from Facebook. The following describes the behavior of each provisioning capability.

|   |                                                                                                                                                                                                                                       |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can configure the following capabilities and specify which users to provision when you get to the [Creating a provisioning connection](pf_workplace_connector_creating_a_provisioning_connection.html) part of the setup process. |

## Synchronizing existing users

PingFederate synchronizes users based on the `UserName` attribute in Workplace from Facebook. If a user already exists in your datastore and Workplace from Facebook, mapping this attribute correctly links the two records together.

For example:

* In Workplace from Facebook, Janet's `UserName` is `jsmith`.

* In your datastore, Janet's `sAMAccountName` is `jsmith`.

* On the **Attribute Mapping** tab of your provisioning connection configuration, map the `UserName` attribute to `sAMAccountName`.

* When the provisioning connector runs, the datastore user is provisioned with a `UserName` of `jsmith`. That matches Janet's existing `UserName` in Workplace from Facebook, so her information in the datastore is synchronized to her Workplace from Facebook account.

## User provisioning

PingFederate provisions users when any of the following happens:

* A user is added to the datastore group or filter that is targeted by the provisioning connector.

* A user with `disabled` status is added to the datastore group or filter that is targeted by the provisioning connector, and the**Provision disabled users** provisioning option is enabled. This feature is not available in all provisioning connectors.

|   |                                                                                                                                                |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can define which users PingFederate targets for provisioning on the **Source Location** tab of your provisioning connection configuration. |

## User updates

PingFederate updates users when a user attribute changes in your datastore.

|   |                                                                                                                                                   |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can define which attributes PingFederate monitors for changes on the **Attribute Mapping** tab of your provisioning connection configuration. |

## User deprovisioning

PingFederate deprovisions users when any of the following happens:

* A user is deleted from the user store.

* A user is disabled in the user store.

* A user is removed from the datastore group or filter that is targeted by the provisioning connector.