27
Views
2
Comments
[IdP] About just-in-time user provisioning
idp
Web icon
Forge asset by João Barata
Application Type
Traditional Web


Is it possible to turn off JIT provisioning by using Idp?

If so, are there any operational risks associated with turning it off?

For example, information linked by SAML authentication will no longer be linked.

2021-06-21 12-37-59
Wei Zhu

It seems you want to turn off Automatic User Provision that will auto create user if user not exist.
This feature can be disabled in SP Connector Internal Setting.


Usually user will be redirect to your external IdP(Azure, Okta, etc) for authentication.
After authentication, user will be redirect back to OutSystems.
At this point, if user not exist and Automatic User Provision is disabled
User_Check action will return invalid and error message will be displayed. 

Regards
Wei


2025-07-22 10-30-27
Mandar Deshpande

Hi @Masahiro Harahata 

Turning it off changes the authentication model significantly:

  • New Users will be blocked
  • SAML Attribute Updates won’t propagate
  • There would be risk of Identity mismatch
  • Increased Administrative Overhead
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.