What is User Provisioning with JIT?
With just-in-time user provisioning (JIT provisioning), you are able to create a Loopio user directly within the IDP, and their user account will be created in Loopio the first time they log in.
Prerequisites
- You have SAML SSO enabled with Loopio or will enable it now
Creating Attributes in the IdP
The auto provisioning process requires the creation of four custom attributes in your Identity Provider. These are passed to Loopio each time a user attempts to login and are outlined in the following chart:
Attribute | Format | Description | Type |
firstName | Unspecified | First name of user | String |
lastName | Unspecified | Last name of user | String |
loopioAccess | Unspecified | Identifies users that have access to the Loopio application. | Boolean |
loopioRole | Unspecified |
The assigned role of the user in the Loopio application. Must match roles defined in the Loopio Admin > Roles screen and is case sensitive. |
String |
Once these attributes are set up, feel free to test the auto provisioning feature by making sure you can log in to your existing account and either:
- Provision a license to someone who is currently not set up in the Loopio account
- Change your role in your IdP to see if the change is successfully passed to Loopio
Configuring a User
- Make sure the User is added to the IdP
- Fill in firstName and lastName attributes for the User
- Make sure User has access to Loopio through the loopioAccess Attribute
- Set the User's permission level using the loopioRole attribute
- The user will then be able to login to Loopio via the IdP or going to your login URL
- No action on the Loopio end is required
Tip: Be sure to confirm that this User is assigned access to the Loopio Application if required.
Restricting Access of Users in the IdP
- Set the attribute - loopioAccess = false
- Setting loopioAccess = false acts as the technical disabling of a User, however their account within Loopio will not appear disabled unless they attempt to log in
Note: Read more about How to Manage Loopio Users with Autoprovisioning Enabled