Just-In-Time (JIT) provisioning, is a process in which a user account is created in an application at the moment of authentication, rather than beforehand. This happens when a new user logs in via Single Sign-On (SSO). JIT provisioning is used by default when SSO is enabled for your team. For more information on SSO, see this article.
With JIT provisioning, you can do the following:
- Automatically create your team members in your DeepL account from an identity provider (IdP)
- Synchronize their group membership.
JIT group synchronization is set up after the SSO configuration.
User management
For each user who successfully logs in via your identity provider, a DeepL account is created until the maximum limit of team members for your team is reached. Once you reach the limit of team members in your plan, new team members can still join your team but won't be able to use DeepL via your paid plan.
Depending on your settings in your DeepL admin account, users can still log in via SSO and use the free version of DeepL. For more information, see this article. If you disable the free version of DeepL for logged-in users and exceed the number of licenses in your plan, users won't be able to use DeepL when logged in.
You can free up licenses for users who haven't used DeepL, or you can purchase more licenses. For more information on identifying users that haven't used DeepL, see this article. For more information on removing or deprovisioning users, see this article.
Without JIT group synchronization
When JIT group synchronization is disabled, users are added only to the default group during SSO login. If you want to assign the user to an additional group, do the following.
- Log in to DeepL as an admin and click on the account menu.
- Select Account and go to the tab Groups.
- To add the users to a group, click on Edit or Add users next to the group to which you want to add the users.
- Enter the email addresses under Add users and save the changes.
Set up JIT group synchronization
We provide the following documentation to set up JIT group synchronization:
- Set up JIT group synchronization: OpenID Connect and Microsoft Entra ID
- Set up JIT group synchronization: OpenID Connect and Okta
- Set up JIT group synchronization: OpenID Connect and OneLogin
- Set up JIT group synchronization: SAML and Okta
- Set up JIT group synchronization: SAML and Microsoft Entra ID