Introduction

The Just-in-time Provisioning solution automates the creation of user accounts in Zivver when users log in using Single Sign-On. This cloud-based solution eliminates the need for manual account creation in the WebApp or setting up the Synctool or Cloud Sync to pre-synchronize accounts from source systems. By leveraging this solution, deployments can be simplified and the adoption of Zivver within your organization can increase.

When a user logs in with Single Sign-On, their Zivver account is automatically created using the information provided by the Single Sign-On application. The user is seamlessly logged in to Zivver without any noticeable interruption caused by the account creation process.

In addition to using the WebApp, Synctool, or Cloud Sync for creating functional accounts and performing other account management actions, you can also use Just-in-time Provisioning for user account creation.

Prerequisites

• Your Zivver organization must use Single Sign-On.
• Your Identity Provider’s SAML response needs to be amended with a Zivver DomainKey. For Entra ID and AD FS, this should work out of the box.

Configuration

Please contact support@zivver.com if you want to use Just-in-time Provisioning. Include in your request which Identity Provider (Entra ID, Okta, AD FS) your organization uses. Zivver Support can help you configure Just-in-time Provisioning.

Limitations

Domain limitation

Just-in-time Provisioning can only be used for one domain per Zivver tenant.

User account limitations

The following account management operations must still be performed manually in the WebApp or by using the Zivver Synctool or Zivver Cloud Sync:

• Update the name or email address of a user account
• Suspend or delete a user account
• Add or remove delegate access to a user account
• Add or remove email aliases
• Assign a user account to an Organizational Unit in Zivver
• Special functions such as updating the ZivverAccountKey

Functional account limitations

Just-in-time Provisioning only supports user accounts. This means that for functional accounts, the following account management operations must still be performed manually in the WebApp or by using the Zivver Synctool or Zivver Cloud Sync:

• Create a functional account
• Update the name or email address of a functional account
• Suspend or delete a functional account
• Add or remove delegate access to a functional account
• Add or remove email aliases
• Assign a functional account to an Organizational Unit in Zivver