PingFederate's just-in-time (JIT) provisioning allows SPs to create user accounts on the fly during SSO events, based on attributes received in SSO tokens from IdPs. An SP can also use the feature to update existing user records.


This configuration task is presented in the administrative console only when the JIT Provisioning check box is selected in the Connection Options screen.

JIT Provisioning
  1. Create a new IdP connection or select an existing IdP connection on the Service Provider menu.
  2. On the Connection Type screen, select the Browser SSO Profiles check box and a protocol from the list.
  3. On the Connection Options screen, select the Browser SSO check box and then the JIT Provisioning check box.
  4. Complete the Browser SSO configuration.
  5. On the the JIT Provisioning screen, click Configure User Provisioning to begin the configuration of JIT provisioning.