---
title: User management
description: The Lucidchart Provisioner synchronizes users from your datastore to Lucidchart. The following describes the behavior of each provisioning capability.
component: lucidchart
page_id: lucidchart::pf_lucidchart_connector_user_management
canonical_url: https://docs.pingidentity.com/integrations/lucidchart/pf_lucidchart_connector_user_management.html
revdate: June 21, 2024
section_ids:
  synchronizing-existing-users: Synchronizing existing users
  user-provisioning: User provisioning
  user-updates: User updates
  user-deprovisioning: User deprovisioning
---

# User management

The Lucidchart Provisioner synchronizes users from your datastore to Lucidchart. The following describes the behavior of each provisioning capability.

|   |                                                                                                                                                                                                                      |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can configure the following capabilities and specify which users to provision when you get to the [Configure provisioning](setup/pf_lucidchart_connector_configure_provisioning.html) part of the setup process. |

## Synchronizing existing users

PingFederate synchronizes users based on the `Username` attribute in Lucidchart. If a user already exists in your datastore and Lucidchart, mapping this attribute correctly links the two records together.

For example:

* In Lucidchart, Janet's `Username` is `bjensen`.

* In your datastore, Janet's `sAMAccountName` is `bjensen`.

* On the **Attribute Mapping** tab of your provisioning connection configuration, map the `Username` attribute to `sAMAccountName`.

* When the provisioning connector runs, the datastore user is provisioned with a `Username` of `bjensen`. That matches Janet's existing `Username` in Lucidchart, so her information in the datastore is synchronized to her Lucidchart account.

## User provisioning

PingFederate provisions users when any of the following happens:

* A user is added to the datastore group or filter that is targeted by the provisioning connector.

* A user with `disabled` status is added to the datastore group or filter that is targeted by the provisioning connector, and the Provision disabled users provisioning option is enabled. This feature is not available in all provisioning connectors.

|   |                                                                                                                                                |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can define which users PingFederate targets for provisioning on the **Source Location** tab of your provisioning connection configuration. |

## User updates

PingFederate updates users when a user attribute changes in your datastore.

|   |                                                                                                                                                   |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | You can define which attributes PingFederate monitors for changes on the **Attribute Mapping** tab of your provisioning connection configuration. |

## User deprovisioning

PingFederate deprovisions users when any of the following happens:

* A user is deleted from the user store.

* A user is disabled in the user store.

* A user is removed from the datastore group or filter that is targeted by the provisioning connector.