1fj3q (1fj3q) asked a question.
JIT performed on which OKTA API calls
Can someone point me to the OKTA API documentation which mention about what Okta API calls perform JIT ?
Hi Sandeep, thanks for your question! I wasn't able to find this documentation on a first pass - does anyone on the Community know where to find this?
- Mihai Burcea - Okta (Okta, Inc.)
Hello Sandeep,
We do not have a specific call for it as JIT is triggered once the user authenticates in Okta. So the JIT process is started with an Auth call and then a create user is triggered.
Hope this answers your question.
Mihai Burcea
Tier 2, Okta Customer Support.
Expand Post - 1fj3q (1fj3q)
Mihai,
So only when \api\authn API call can perform the JIT and there is no other API call which can perform JIT?
Thanks,
Sandeep
- 1fj3q (1fj3q)
After working with Okta Support on other issue here what I have learned about JIT. JIT will work under two scenarios for AD administered users:
- User perform authentication through login or \api\v1\authn call.
- Admin perform user search and open the user profile. This scenario will not perform JIT for users who are being reactivated in the AD (Okta User Profile is deactivated and AD profile is Active), in such case user need to perform authentication (Scenario#1)
Expand Post Sandeep - thanks so much for jumping back in and sharing your expertise here!
This question is closed.
After working with Okta Support on other issue here what I have learned about JIT. JIT will work under two scenarios for AD administered users: