Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

Refine JIT user provisioning description in SSO docs (#34434)

Browse Source 
Clarified explanation of JIT user provisioning and account creation
process.
This commit is contained in:
Allen Houchins
2025-10-17 09:08:33 -05:00
committed by GitHub
parent 08e5d451ba
commit 6a04a40c9a
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/Deploy/single-sign-on-sso.md
+1 -4
View File
@@ -161,11 +161,8 @@ If you're configuring end user authentication head to **Settings > Integrations
Fleet automates user creation using just-in-time (JIT) provisioning. Fleet uses System for Cross-domain Identity Management (SCIM) to [map end users' identity provider (IdP) information to host vitals](https://fleetdm.com/guides/foreign-vitals-map-idp-users-to-hosts). SCIM for user provisioning is coming soon.
This section explains how JIT user provisioning works. With JIT, Fleet will automatically create a user account when someone logs in for the first time using your configured SSO. This removes the need to create individual user accounts for a large organization.
When JIT user provisioning is turned on, Fleet will automatically create an account when a user logs in for the first time with the configured SSO. This removes the need to create individual user accounts for a large organization. The new account's email and full name are copied from the user data in the SSO response.
When JIT user provisioning is turned on, Fleet will automatically create an account when a user logs in for the first time with the configured SSO.
The new account's email and full name are copied from the user data in the SSO response.
By default, accounts created via JIT provisioning are assigned the [Global Observer role](https://fleetdm.com/docs/using-fleet/permissions).
To assign different roles for accounts created via JIT provisioning, see [Customization of user roles](#customization-of-user-roles) below.