This documentation is for WSO2 Identity Server 5.1.0 . View documentation for the latest release.

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.

You can configure Just-inIn-Time (JIT) provisioning of for the identity provider. With Just-in-Time provisioning, you can create users on the fly without having to create user accounts in advance. For example, if you recently added a user to your application, you don't do not need to manually create the user in the Identity Server or in the underlying user store. When they log in with single sign-on

When the users are authenticated as part of the authentication flow, their account is automatically created for them, eliminating the time and effort related to creating the account. Just-in-Time provisioning works with your identity provider to pass the correct user information to the Identity ServerSo when the response from the identity provider comes into the Identity Server, and if JIT provisioning is enabled, the user is provisioned to the user store in the Identity Server. You can specify the user store to which the provisioning happens.

No include

To navigate to the role configuration JIT provisioning section, do the following.

  1. Sign in. Enter your username and password to log on to the management consoleManagement Console
  2. Navigate to the Main menu to access the Identity menu. Click Add under Identity Providers.
  3. Fill in the details in the Basic Information section. 


  • Selecting No provisioning from the available options disables Just-In-Time provisioning. This is selected by default.
  • Alternatively you could choose to always provision users to the user store domain. Select the user store domain the user store domain name from the dropdown list to provision users to the user store. The default user store that is shipped with the Identity Server is the user store available by default. You can configure a user store of your preference and it will be listed in this dropdown for selection.