---
title: "Configure Just-in-Time (JIT) provisioning"
slug: "configure-just-in-time-jit-provisioning"
updated: 2025-05-12T21:09:51Z
published: 2025-05-12T21:09:51Z
canonical: "support.fullcast.com/configure-just-in-time-jit-provisioning"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fullcast.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Just-in-Time (JIT) provisioning

Use Just-in-Time (JIT) provisioning to automatically create a user account in your Fullcast instance the first time a user logs in with a SAML Identity Provider (IdP).

### Before you begin

- You must have [SSO configured](/v1/docs/configure-sso) with your IdP.
- The user must already be created and authenticated in your IdP.

### Configure JIT in your IdP

#### Attribute name value configuration

When you set up SAML SSO with JIT in Fullcast, use the following attribute name values in the SAML response in your IdP:

| Attribute | Name value |
| --- | --- |
| First name | FirstName |
| Last name | LastName |
| Email address | Email |

#### SAML response configuration

For the SAML response, use the following NameID format and value to ensure that the user's email address is correctly identified and used for authentication within Fullcast.

> [!NOTE]
> Note
> 
> Make sure your IdP is configured to send the NameID in this format with the appropriate email address value.

- **NameID format**—use one of the following:
  - `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified`
  - `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress`
- **NameID value:** The user's email address.