

Configurng outbound provisioning for a service provider¶

You might want to outbound provision users that self-register to your applications to other entities, such as Google or Salesforce. This section guides you on configuring outbound provisioning for a service provider.

Scenario

For example, your organization has a registration portal to add new employees and a registration portal to add customers to your system. WSO2 Identity Server acts as your Identity Provider. You want the newly added users to be provisioned to Google and Salesforce because Gmail and Salesforce are used for day-to-day activities in the organization. The customer details only need to be stored in the WSO2 Identity Server's user store. Therefore, you also configure the Service Provider you created for the employees' registration application to handle outbound provisioning.

Prerequisites¶

You need to register a service provider on the Management Console.
You need to add an identity provider and enable an outbound povisioning connector.

Configure outbound provisioning¶

To configure outbound provisioning:

On the Management Console, go to Main > Identity > Service Providers.
Click List, select the service provider you want to configure, and click on the corresponding Edit link.
Expand the Outbound Provisioning Configuration.

Note

This section will be configurable only if outbound provisioning connectors are configured for the IdP.
Choose the identity provider from the drop-down and click the + icon to add the IdP.

Enable the following options based on the requirements of your service provider:

Option	Definition
Blocking	Select this if you want to block the authentication flow during provisioning. In the default non-blocking mode, provisioning and authentication happen in two different threads. Enable this if you want to allow users to access your application only if the user is both authenticated and provisioned.
Enable Rules	Select this to provision users based on a set of pre-defined XACML rules. For more information, see rule based provisioning
JIT Outbound	Select this to enable user provisioning during authentication. To enable this you need to configure jit provisioning for your idp.

save-idp-config

Click Update to save your changes.