Just-in-Time (JIT) provisioning

To guarantee a seamless work experience, it is imperative that enterprises ensure employees gain access to applications they require as soon as they join the organization. System for Cross-domain Identity Management (SCIM) is an open standard that facilitates automated provisioning of user accounts in cloud applications.

ADSelfService Plus supports JIT provisioning. When a user is assigned an application through a policy, and the user account does not exist in the application, an account is automatically created through the SCIM protocol when accessing the application via ADSelfService Plus.

Note: SAML-based SSO must be configured for applications to enable Just-in-Time provisioning.

Supported applications

ADSelfService Plus supports JIT provisioning for the following applications:

• AssetSonar
• Bonusly
• monday.com
• Peakon
• Pingboard
• Proxyclick
• ScreenSteps
• Slack
• Tableau
• ThousandEyes
• Velpic

Managing license consumption

ADSelfService Plus enables you to control license consumption in target applications. Simply specify the desired count in the License Consumption Limit field. This ensures that user account creation stops automatically once the designated license limit is reached.

Note: If a user already has an account in the application, their access attempt through ADSelfService Plus will also be counted towards the license count.

JIT provisioning audit report

You can view user provisioning auditing details from the JIT Provisioning Audit Report in the Reports tab.