From 6a04a40c9ac2b0485839497e45932cc46ae9f5d1 Mon Sep 17 00:00:00 2001 From: Allen Houchins <32207388+allenhouchins@users.noreply.github.com> Date: Fri, 17 Oct 2025 09:08:33 -0500 Subject: [PATCH] Refine JIT user provisioning description in SSO docs (#34434) Clarified explanation of JIT user provisioning and account creation process. --- docs/Deploy/single-sign-on-sso.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/docs/Deploy/single-sign-on-sso.md b/docs/Deploy/single-sign-on-sso.md index 98e6e2ad77..f3c4e8c40d 100644 --- a/docs/Deploy/single-sign-on-sso.md +++ b/docs/Deploy/single-sign-on-sso.md @@ -161,11 +161,8 @@ If you're configuring end user authentication head to **Settings > Integrations Fleet automates user creation using just-in-time (JIT) provisioning. Fleet uses System for Cross-domain Identity Management (SCIM) to [map end users' identity provider (IdP) information to host vitals](https://fleetdm.com/guides/foreign-vitals-map-idp-users-to-hosts). SCIM for user provisioning is coming soon. -This section explains how JIT user provisioning works. With JIT, Fleet will automatically create a user account when someone logs in for the first time using your configured SSO. This removes the need to create individual user accounts for a large organization. +When JIT user provisioning is turned on, Fleet will automatically create an account when a user logs in for the first time with the configured SSO. This removes the need to create individual user accounts for a large organization. The new account's email and full name are copied from the user data in the SSO response. -When JIT user provisioning is turned on, Fleet will automatically create an account when a user logs in for the first time with the configured SSO. - -The new account's email and full name are copied from the user data in the SSO response. By default, accounts created via JIT provisioning are assigned the [Global Observer role](https://fleetdm.com/docs/using-fleet/permissions). To assign different roles for accounts created via JIT provisioning, see [Customization of user roles](#customization-of-user-roles) below.