How to Set Up Just-in-Time Provisioning (JIT Provisioning) ®

Just-In-Time Provisioning is available on the following subscriptions:

• On this page:

  • About Just-In-Time (JIT) Provisioning
  • Setting Up JIT Provisioning
  • Active Directory Support 

About Just-In-Time (JIT) Provisioning

Just-In-Time (JIT) Provisioning allows users within the same email domain to create UserTesting accounts quickly.  With Just-in-Time (JIT) Provisioning enabled when new users in your domain try to sign in for the first time, Viewer or Collaborator accounts will be automatically created in the General workspace for them. 

To use Just-in-Time (JIT) Provisioning, Single Sign-on (SSO) must be enabled and activated. Please see this article for more information.

Things to Note:

• One of the advantages of JIT Provisioning is that customers can make changes to their Just-In-Time (JIT) Provisioning configurations at any time. 
• The Security tab and Just-In-Time (JIT) Provisioning settings are only accessible by customer admins. 

How do I set up Just-In-Time (JIT) Provisioning?

1. Navigate to the part of the page where you see the initials for the account name; click here for the menu. On the drop-down menu, click Settings.

2. Under Settings, click on the Security tab. Make sure that SSO has been enabled and activated. 

If Just-In-Time (JIT) Provisioning has been made available for your account, you will see it listed in the settings. To activate it, select the toggle in the JIT Provisioning area. 

If you don't see the Just-In-Time (JIT) Provisioning option, please reach out to support to check if it can be made available for you.

3. If you need to turn off Just-In-Time (JIT) Provisioning for any reason, select the toggle in the Just-In-Time (JIT) Provisioning area.

4. Once Just-In-Time (JIT) Provisioning has been activated, new users who attempt to log in using SSO will have an account created for them.

Active Directory Support

If you use Microsoft’s Active Directory (AD) to manage your employees’ information, UserTesting’s Active Directory support allows you to centrally manage permissions and access to the UserTesting Platform. Note: This capability is only available on the Ultimate edition of the Flex plan.

Here’s how to set it up:

1. Submit a request to Support.
2. Provide the AD Group names that you want UserTesting to map for each role (Admin, Creator, Viewer).
3. If you have multiple accounts, UserTesting needs to know which account you want to set up Active Directory Support for.

Please provide any feedback you have on this article. Your feedback will be used to improve the article and should take no more than 5 minutes to complete. Article evaluations will remain completely confidential unless you request a follow-up.