Outbound provisioning¶

Outbound provisioning automatically provisions user accounts from WSO2 Identity Server to external systems. When enabled, user lifecycle events such as creation, updates, and deletion are synchronized in real-time with connected applications.

Provisioning levels¶

WSO2 Identity Server lets you configure outbound provisioning at the following levels:

Organization-level: Users are automatically provisioned to the external system when:
- a user is provisioned in WSO2 Identity Server over an API.
- an administrator onboards a user from the WSO2 Identity Server Console.
- a user self-signs up from a WSO2 Identity Server login page.
- a user is JIT provisioned in WSO2 Identity Server.

Role-based provisioning¶

In addition to provisioning levels, you can refine your provisioning criteria by managing which users are provisioned based on their assigned roles.

Learn more about role-based provisioning.

Outbound connectors¶

WSO2 Identity Server supports provisioning users via the following outbound connectors:

Provisioning attributes¶

When a provisioning request uses a token issued to an authorized application (other than the Console application), WSO2 Identity Server applies attribute filtering. Only the attributes requested by that application are provisioned to the external system.