You are here:
Simplified Identity Federation for Existing Users
Account Manager now supports automatic activation and linking for new user accounts. This change improves the single sign-on (SSO) user experience by making it simpler and faster.
Why: With Just-in-time user provisioning, Account Manager administrators don’t need to pre-populate users in Account Manager. After users are automatically provisioned, the account administrator can assign roles to these users.
How: To use automatic activation and linking, your Account Manager administrator creates a user account in Account Manager. When the new User in an Initialize state performs SSO, their Account Manager account is automatically activated and linked to their Salesforce Identity account or third-party IAM that uses Salesforce Identity.
When an active Account Manager user in an enabled state performs SSO, their accounts are also automatically linked with their Salesforce Identity account. For security purposes, these users must authenticate with their Account Manager credentials before their accounts are linked. If they have an MFA verifier registered, they must submit their MFA verification to link their accounts.
See Also
