Skip to main content
Version: 8.3

Just-In-Time User Provisioning

Use Just-In-Time User Provisioning (JIT UP) function to avoid creating accounts for each separate service and to keep user database up-to-date. JIT UP extends the Single Sign-On (SSO) technology and helps to reduce the number of operations for administrating accounts and personal data in contact records. Each time a user logs on using SSO, the data on the contact page are updated with the data obtained from the identity provider (Fig. 1). If a user has no account in the Creatio, it can be created when the user logs in for the first time.

Fig. 1 Update data via Just-in-Time User Provisioning
Fig. 1 Update data via Just-in-Time User Provisioning

Updating a contact with data from an identity provider includes updating data on the record page and contact’s connections to user groups.

To prevent unintended data overwrites, you can turn off JIT provisioning by clearing the corresponding checkbox in the Single Sign-On settings. When turned off, Creatio no longer updates user data from the identity provider on login. This option is available for both SAML and OpenID-based SSO.


See also

Single Sign-On via ADFS

Single Sign-On via OneLogin

Single Sign-On via Microsoft Entra AD