--- title: "Just-In-Time User Creation" slug: "just-in-time-user-creation" tags: ["single sign-on"] updated: 2025-01-06T21:40:11Z published: 2025-01-06T21:40:11Z canonical: "support.smarteru.com/just-in-time-user-creation" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.smarteru.com/llms.txt > Use this file to discover all available pages before exploring further. # Just-In-Time User Creation In order to use this feature, be sure to enable [external authorization](https://support.smarteru.com/docs/en/account-external-authorization-sso#enable-external-authorization) for your account. [Just-in-Time user creation](/v1/docs/user-sync-integrations) enables you to create a user's account in SmarterU at the time of an SSO request. SmarterU has tested the following identity providers: - [Microsoft Active Directory Federation Services (ADFS)](/v1/docs/sso-active-directory-federation-services) - [Okta](/v1/docs/sso-okta) - [Salesforce](/v1/docs/sso-salesforce) New to SmarterU? Learn how SmarterU’s automation features can help you do more in less time. [YouTube video player](https://www.youtube.com/embed/Jylk42xm96w?si=S6s6V_uZIgMmdpe2) ## Setting Up Just-in-Time User Creation BEFORE YOU BEGIN You'll need to copy the IDP metadata from the SSO provider. To configure Just-in-Time user creation in SmarterU: 1. [Edit your account's settings](/v1/docs/editing-your-account-settings). 2. Expand the External Authorization accordion and [enable SAML for your SmarterU account](/v1/docs/sso-saml-20). 3. Paste the IDP metadata that you copied from your SSO provider into your SmarterU account's [**IdP Metadata** setting](/v1/docs/sso-saml-20#idp-metadata). ![Graphical user interface, text, application, website Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-image-ayjpm5uv.png) 1. Search the IDP metadata that you pasted into the IdP Metadata setting for: ```plaintext ``` 1. Just before the first occurrence of , copy and paste the following: ```plaintext ``` ![A picture containing graphical user interface Description automatically generated](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/just-in-time-user-creation-image-rs77waj6.png) 1. From the **Identifier Attribute/Claim** list, select the attribute that uniquely identifies each user. 2. Select the **Identifier Type** that describes the attribute selected in step 6. 3. Select the [**Enable Just In Time User Creation** checkbox](/v1/docs/sso-saml-20#enable-justintime-user-creation). 4. From the **Given Name Attribute/Claim** list, select the metadata field that contains the [user's given name](https://support.smarteru.com/v1/docs/user-login-information#given-names-required). 5. From the **Surname Attribute/Claim** list, select the metadata field that contains the [user’s surname](https://support.smarteru.com/v1/docs/user-login-information#surname-required). 6. From the **Home Group** list, select the [group](/v1/docs/groups) that users will be added to and which will be used as their [home group](/v1/docs/home-groups). > [!NOTE] > Users added to SmarterU with Just-in-Time User Creation are added to the same [group](/v1/docs/groups). ![JIT User Creation - Home Group 20241029](https://cdn.document360.io/7efaadab-fef6-4186-806a-2ca14c9ce9ea/Images/Documentation/JIT%20User%20Creation%20-%20Home%20Group%2020241029.png) > [!NOTE] > The [account invitation email](https://support.smarteru.com/docs/account-email-template-options#account-invitation) is not sent to users created with Just-in-Time User Creation. ## Related - [Just-In-Time User Creation with Okta](/just-in-time-user-creation-with-okta.md) - [SSO: Active Directory Federation Services](/sso-active-directory-federation-services.md) - [SSO: Okta](/sso-okta.md) - [SSO: Salesforce](/sso-salesforce.md) - [SSO: SAML 2.0](/sso-saml-20.md) - [User Sync Integrations](/user-sync-integrations.md)