Settings
Sessions and Security
SAML Auto-Provisioning
4 min
overview auto provisioning is a process that automates the creation of user accounts in a system or application when enabled, it ensures that a new user account is created automatically when a user logs in with valid credentials, such as through a single sign on (sso) service for example, in the context of saml based sso, if a user attempts to log in and their credentials are authenticated successfully, the system will automatically generate a basic user account this account may be created without any pre assigned roles or group memberships, which can then be configured later as needed if the user is associated to a particular group, the group is automatically synced with the user on creation prerequisites access to the admin portal jumpcloud or any sso account credentials group synchronization with swimlane during user creation to enable automatic group synchronization in the swimlane application during user creation via sso, ensure that the groups attribute is included in the attribute mapping configuration of your respective saml identity provider (for example, azure ad, okta, jumpcloud, and so on) this allows swimlane to receive and assign user group information at the time of login or provisioning for more details, see the following image enable auto provisioning navigate to settings > sessions & security > authentication turn on the saml authentication toggle click saml settings configure saml auto provisioning fill in all the required authentication details refer to saml authentication for more information for more information on filling the saml authentication dialog box refer to enable saml for sso toggle enable saml auto provisioning to on save the changes create a new user login via sso automatic user creation once the login is successful, a basic user account is created automatically if the user is associated to a particular group, the group is automatically synced with the user on creation verify user creation go to the admin portal and check for the user