Provisioning patterns¶
WSO2 Identity Server uses provisioning patterns to build the username of the user account when provisioning users to Google and Salesforce.
Consider two users with the same username onboarded to different user stores in WSO2 Identity Server. During provisioning, an outbound connector may not allow duplicate usernames. Provisioning patterns resolve this limitation by using the following four attributes to create the user ID.
- Username - UN
- User Domain - UD
- Tenant Domain - TD
- Identity Provider - IDP
You have the option to configure the provisioning pattern and the provisioning separator: the character that separates the different attributes of the provisioning pattern.
Example
For an outbound connector, if you set:
- Provisioning pattern =
{UD, UN, TD, IDP} - Provisioning separator =
-(hyphen)
WSO2 Identity Server provisions a user created with the username [email protected] in the primary user store of the super tenant to the external system with this username: