Just-in-time provisioning

Just-in-time (JIT) provisioning means that users can be added dynamically to accounts that allow it. New users can join as Viewers without having to be invited to the account.

You can use JIT provisioning if you have an SSO account, or if you have an IBMid account that is federated against your organization's identity provider.

To enable JIT provisioning:
  1. In the Admin page, open the Settings > Security tab.
  2. In the Authentication section, click the IBMid tab or Single Sign-On (SAML 2.0) tab (if enabled).
  3. Switch the toggle for Enable Just-in-Time Provisioning. For IBMid, specify the IBMid realm that users authenticate against. The realm cannot be www.ibm.com and must be the federated realm for your organization. If you don't know your realm name, you can get it from the IBMid support team. The realm name is used only for your organization and ensures that users outside of your organization don't gain access to the account.