Skip to content
English
Contact Support
  • There are no suggestions because the search field is empty.

How Just-In-Time User Provisioning Works

Learn all about Just-In-Time User Provisioning.

When a user attempts to single sign-on into Foundry, if the user already exists in Foundry, then the user get signed in as that user; see SAML NameID And EVERFI SSO ID  for specific details of how a user is matched. If the user does not exist, then there are two possible paths:

  • If JIT is not enabled, the user will see an error message. This is the default behavior for Foundry.
  • If JIT is enabled, the user will be created immediately in Foundry, and is then signed in as that newly-created user.

When EVERFI enables your account for JIT, then you can configure JIT for your identity provider by checking the “allow registration during SSO” checkbox and setting up some default user values and mapping Attributes to user properties. The new user’s properties will be set based on the values the SAML Response provides in different Attributes.