---
title: Provision Dynamic Account node
description: Use the Provision Dynamic Account node in PingAM to create a user account after SAML2 or social authentication using attributes from the identity provider.
component: platform
version: 7.5
page_id: platform:auth-node-ref:am-only/provision-dynamic-account
canonical_url: https://docs.pingidentity.com/platform/7.5/auth-node-ref/am-only/provision-dynamic-account.html
llms_txt: https://docs.pingidentity.com/platform/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
page_aliases: ["auth-node-provision-dynamic-account.adoc"]
section_ids:
  availability: Availability
  outcomes: Outcomes
  properties: Properties
  example: Example
---

# Provision Dynamic Account node

Provision an account following successful authentication by a SAML2 authentication node or the [Social Provider Handler node](../social-provider-handler.html).

Accounts are provisioned using properties defined in the attribute mapper configuration of a social authentication or SAML2 authentication node earlier in the flow.

If a password has been acquired from the user, for example, by using the [Password Collector node](password-collector.html), it is used when provisioning the account; otherwise, a 20 character random string is used.

In addition to retrieving the password from the node state, the [Provision Dynamic Account node](provision-dynamic-account.html) gets the `realm` value, and `attributes` and `userNames` from `userInfo` in the shared state. It sets the `username` attribute in the node's shared state.

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | No         |
| PingAM (self-managed)                 | Yes        |
| Ping Identity Platform (self-managed) | No         |

## Outcomes

Single outcome path.

## Properties

| Property         | Usage                                                                                                                                                             |
| ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account Provider | Specifies the name of the class that implements the account provider.Default: `org.forgerock.openam.authentication.modules.common.mapping.DefaultAccountProvider` |

## Example

The following example uses this node to let users who have performed social authentication using Google provide a password and provision an account if they do not have a matching existing profile. They must enter a one-time passcode to verify they are the owner of the Google account.

![Dynamic account provisioning in context](../_images/trees-node-Google-DynamicAccountCreation-example.png)