Hi,

I am trying to configure SSO with JIT provisioning for my community with limited SSO knowledge. We have SSO configured in our production environment and it is working fine. Could you please help with below two questions:

1) SSO setup guide explains the steps for creating records when existing records not found. It says, search contact first, if not found then account and if nothing matching there create  User, Account and Contact records. My requirement to create a user record ONLY if email id matches with a contact's email. we have customers created as contact records mapped to a generic account. We dont want to create a user record if the customer is already with us.  Is this possible?

2) I understand if i enable JIT in current SSO setup in prod, it will impact the existing salesforce users. So is it a good approach to create a new SSO setting with same issuer, entity id with this new community url ?

Thanks in Advance,

Manoj