Product Update

New JIT Provisioning Attribute

Carlyn Manly
2018-06-29
1 Min Read

Xurrent has offered just-in-time access provisioning for end users for some time now. It offers support organizations a way to automatically maintain the information of people each time they access Self Service to obtain support.
When someone accesses Xurrent for the first time, the JIT functionality can be used to register this person. But when this person accesses Xurrent the next time, the support organization may not want all of this personโ€™s information updated. The organization may, for example, manually maintain the links between a person record and the personโ€™s manager and organization in Xurrent. In such cases, the new on_create attribute can be used to specify that the organization and manager fields should only be set on creation, and should not be updated automatically.
In this example, the support organizationโ€™s identity provider (IdP) should include the on_create attribute as follows in the SAML response it sends to Xurrent:

on_create = organization manager

More information about this JIT attribute can be found in the Xurrent Developer documentation.