Choose whether PingFederate initiates user provisioning only when the user identifier is new, or every time your site receives a single sign-on (SSO) token.
If you choose to have PingFederate initiate user provisioning every time your site receives an SSO token, for all SSO tokens, an existing user account is always updated with incoming attributes.
This tab does not appear for a Microsoft SQL Server datastore if provisioning is accomplished using a stored procedure, because the procedure is always called for all SSO tokens. The procedure should handle both provisioning new users and updating existing ones.
- Only SAML Assertations Containing a New User ID
- All SAML Assertations