Use Just-in-Time (JIT) provisioning to automatically create a user account in your Salesforce org the first time a user logs in with a SAML identity provider. JIT provisioning can reduce your workload and save time because you don’t provision users or create user accounts in advance.
Why aren't all users provisioned when creating a new user in the IdP? Is it to save licenses etc.?
But what if I need for reporting purposes to generate the user on the Service Provider (SdP) when the user is generated on the Identity Provider (IdP), not when the user logs in to the SdP, which would be too late? Do I need a custom REST or SOAP integration for that?
Thanks very much
Jan Kopejtko
