Just-in-Time Provisioning allows Gatekeeper to create Employee Portal users when they sign in for the first time using either the Google or Microsoft SSO method.
Note: Users require the Global Administrator role and Configuration additional permission to perform the steps below.
To enable this:
- From the navigation menu, expand Settings then click Configuration.
- Click Just-in-Time (JIT) Provisioning.
- Enable the Just-in-Time (JIT) Provisioning toggle.
- Enable the toggle for the SSO provider you would like to use.
- If you would like your users to be able to login using Gatekeeper's standard authentication as well as SSO, then enable the Allow Employee Portal Username & Password login toggle.
- If you would like your users to be able to login using Gatekeeper's standard authentication as well as SSO, then enable the Allow Employee Portal Username & Password login toggle.
- Select the Gatekeeper Team to assign users to upon creation, then enter the Email Domain to restrict login access to users with a company-approved email address. This ensures only authorised users can be created in the system.
- Once finished, click Save.
When users log into the Employee Portal for the first time via SSO with a matching email domain, they are automatically created in the system and assigned to the selected team.