When your team uses SSO to access ClickHelp, new users normally need to have an account created in ClickHelp manually before they can log in for the first time. With JIT (Just-In-Time) Provisioning, this step is eliminated — ClickHelp creates the user account automatically the first time a new user logs in via SSO.
How It Works
On a user's first SSO login, ClickHelp checks whether an account exists. If it doesn't, the account is created automatically based on rules you define in advance. No manual intervention needed.
You can configure:
- Identity Providers — you can specify for which providers the feature works (e.g., Google, Salesforce).
- Domain filtering — only allow users from specific email domains (e.g., @yourcompany.com).
- Static Access Groups assignment — all new users get predefined Access Groups.
- Dynamic Access Groups assignment — Access Groups are assigned based on claims passed from your SSO provider.
Only Power Reader accounts can be created this way.
Why It Matters
For organizations that provide restricted documentation to large numbers of internal or external readers via SSO, manually creating ClickHelp accounts adds overhead and friction. JIT Provisioning removes this bottleneck:
- Readers get access to the documentation immediately on their first login.
- No dependency on admins to pre-create accounts.
- Access permissions assignment (via the Access Groups) can be automated based on SSO claims, reducing configuration effort.
Availability
This feature is part of the Enterprise Security add-on and is not enabled by default.
Configuration is handled by the ClickHelp Ops Team — there are no self-service settings in the UI.
To enable automatic user creation for your portal, contact our support team.