Hello folks,
In the last article, we explored how the Multi-IdP Support of miniOrange SAML SSO + User & Group Sync (SCIM) gives teams the flexibility to authenticate users from different identity sources.
Today, let’s look at a feature that makes onboarding effortless and eliminates manual user creation entirely: Just-in-Time (JIT) Provisioning.
Because in fast-moving organizations, users shouldn’t wait for access.
Access should be ready the moment they log in.
🔐 What Is JIT Provisioning?
Think of Just-in-Time (JIT) Provisioning as automatic account creation triggered on a user’s first login.
With JIT enabled, the moment a user signs in through SSO, their account is instantly created in Jira, Confluence, or Bitbucket using the attributes provided by your Identity Provider. This includes essential details like username, email, display name, and department, and it also assigns the user to the appropriate groups to grant the right access.
No CSV uploads. No manual setup. No waiting.
It’s simple: a user logs in → their account is created automatically → they gain immediate access to the correct projects, spaces, and permissions.
JIT ensures that new users can start working right away, while admins save time and reduce errors from manual account management.
⚡ Why Teams Use JIT
-
✅ Instant User Creation & Onboarding - Accounts are automatically created the moment a user logs in via SSO, eliminating delays
-
🎯 Accurate Access Assignment - Users are immediately added to the correct groups and roles, based on your IdP mappings
-
🧩 Works with Any SAML 2.0 Identity Provider
-
🔁 No Manual Intervention - Admins don’t need to pre-create accounts or update permissions manually
-
👥 Streamlined Onboarding for Large Teams - Perfect for organizations with many users, distributed teams, or contractors
-
🔒 Secure & consistent - based fully on trusted IdP attributes, users can access Jira, Confluence, or Bitbucket immediately without waiting for provisioning.
JIT is speed + automation + clean identity data.
💡 What’s Next in the SAML Series?
Up next: Attribute & Group Mapping - how users get the right permissions the moment their account is created.
Because onboarding shouldn’t take time - it should just happen. 🔐
If you have any questions or want to see the plugin in action, reach out to us at atlassiansupport@xecurify.com
