Just-in-time user provisioning automates creating a user account in Account Manager eliminating the need for admins to add users manually. It also links the account with the Salesforce Identity account used for single sign-on (SSO).
Which Salesforce Commerce Product Do I Have?
Just-in-time user provisioning requires that you set identity federation to Allowed or Enforce. It also requires the user to verify their Salesforce My Domain. Just-in-time user provisioning is supported with third-party Identity and Access Management (IAM) using Salesforce Identity. This requires that Salesforce Identity is also configured for Just-in-time provisioning.
After a user is automatically provisioned, the admin can assign roles. By default, roles aren’t assigned as part of just-in-time user provisioning.
See Also: