How to Create Okta Users from Existing Identity Provider Using JIT Provisioning
Nov 13, 2025
Single Sign-On
Okta Classic Engine
Overview
This article discusses how to create Okta users from an existing Identity Provider using JIT provisioning.
Applies To
- Inbound Security Assertion Markup Language (SAML)
- Just-In-Time (JIT) Provisioning
- Okta Classic Engine
Solution
- Navigate to Settings > Customization > Just In Time Provisioning.
-
Click Edit.
-
Check Enable Just In Time Provisioning and click Save.
-
Configure Inbound SAML as detailed here: Identity Providers.
-
In the Authentication Settings of the Add Identity Provider window:
- For If no match is found, select Create new user (JIT).
