Just-in-Time (JIT) provisioning

To guarantee a seamless work experience, it is imperative that enterprises ensure employees gain access to applications they require as soon as they join the organization. Admins also have to be wary of revoking access permissions when employees leave. System for Cross-domain Identity Management (SCIM) is an open standard that facilitates automated provisioning of user accounts in cloud applications.

ADSelfService Plus supports Just-in-Time provisioning. When a user is assigned an application through a policy, and the user account does not exist in the application, an account is automatically created through the SCIM protocol when accessing the application via ADSelfService Plus.

Note: SAML-based SSO must be configured for applications to enable Just-in-Time provisioning.

Supported applications

ADSelfService Plus supports Just-in-Time provisioning for the following applications:

• AssetSonar
• Bonusly
• monday.com
• Peakon
• Pingboard
• Proxyclick
• ScreenSteps
• Slack
• Tableau
• ThousandEyes
• Velpic

Managing license consumption

ADSelfService Plus allows you to control license consumption in target applications. Simply specify the desired count in the License Consumption Limit field. This ensures that user account creation stops automatically once the designated license limit is reached.

Note: If a user already has an account in the application, their access attempt through ADSelfService Plus will also be counted towards to the license count.

JIT provisioning audit report

You can view user provisioning auditing details from the JIT Provisioning Audit Report in the Reports tab.