Just-In-Time User Creation

Just-in-Time user creation enables you to create a user's account in SmarterU at the time of an SSO request. SmarterU has tested the following identity providers:

• Microsoft Active Directory Federation Services (ADFS)
• Okta
• Salesforce

Setting Up Just-in-Time User Creation

To configure Just-in-Time user creation in SmarterU: 

1. Edit your account's settings.
2. Expand the External Authorization accordion and enable SAML for your SmarterU account. 
3. Paste the IDP metadata that you copied from your SSO provider into your SmarterU account's IdP Metadata setting.

4. Search the IDP metadata that you pasted into the IdP Metadata setting for:

<md:NameIDFormat>

5. Just before the first occurrence of <md:NameIDFormat>, copy and paste the following:

<Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="GivenName"/>
<Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Surname"/>

6. Refer to SSO SAML 2.0 for details on the various settings. At a minimum, you'll need to check the Enable Just In Time User Creation checkbox.