{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40645,"path":"platform-security/authentication/t_AdministerSAMLUserProvisioning.md","title":"Administer SAML user provisioning","bundle":null,"doc_type":null,"release":"australia","body":"\n# Administer SAML user provisioning\n\nUpdate the User table with the users in your IdP by first setting up field mapping and then enabling user provisioning through Multi-SSO IdP settings.\n\n## Before you begin\n\nSet up your IdP mapping to identify which fields in the IdP are mapped to the correct fields in the User table.\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## Procedure\n\n1.  Navigate to **All** > **Multi-Provider SSO** > **Properties**.\n\n2.  Select **Enable Auto Importing of users from all identity providers into the user table** \\(**glide.authenticate.multisso.user.autoprovision**\\) to activate this feature.\n\n3.  Click **Save**.\n\n4.  Navigate to **Multi-Provider SSO** > **Identity Providers**.\n\n5.  Open the Identity Provider record that you want to use.\n\n6.  Create a record in the User table when the user does not already exist by selecting **Auto-provision Users**.\n\n    If you upgraded to this release, you need to configure the form and add this field.\n\n7.  Enable user records to be updated when users log in to the IdP and the information on the IdP is out of date with the information on the User table by selecting **Update User Record Upon Each Login**.\n\n    If you upgraded to this release, you need to configure the form and add this field.\n\n8.  Click **User Provisioning Transform Map** to see the map that the system automatically creates.\n\n9.  Make changes to the map as needed.\n\n\n## Result\n\nWhen the first unknown users try to log in, the system creates the fields in the import set table from the metadata.xml file.\n\n**Note:** You cannot map the fields from the IdP table until this first user logs in.\n\n"}}