How Do I Create Users Automatically with Just-In-Time Provisioning?

Last updated: November 14, 2026

With Just-In-Time Provisioning turned on, Ambition creates a user's account the first time they log in through your identity provider (IdP), using the first and last name your IdP sends. New users start without a manager, Groups or permission sets, so your team's admins will need to add that information once the new user has logged in.

Required permissions:

  • The Users: Edit: Can Edit All Users permission is required to turn on Just-In-Time Provisioning.

Required features:

  • The SAML/SSO feature is required to log in with single sign-on.

Turn On Just-In-Time Provisioning

  1. Go to Admin --> People --> Single Sign-On.

  2. Select the time zone new users should get from the Default User Time Zone drop-down menu.

  3. Turn on the Just-In-Time Provisioning toggle.

  4. Click on Save.

Give Employees Access in Your IdP

  1. Assign each employee who needs Ambition to the Ambition app in your IdP.

  2. Ask them to go to your company's Ambition web address and log in. They'll be sent to your IdP to sign in, and their Ambition account will be created when they return.

Finish Setting Up New Users

  1. Navigate to Admin --> People --> Users and click on the new user's name.

  2. Add their manager, Groups, and permission sets.

  3. Click on Save Changes.

Note:

  • A deactivated user won't get a new account. They'll see "You do not have an active account. Please contact your Ambition administrator if you think there's been a mistake" until an admin reactivates them.

  • If your IdP doesn't send a first or last name, the user will be named "New User" until you update their profile.

Related Articles