Automatic provisioning

EnterWorks will request that the IDP authenticates users and manages their user group assignments. When an existing EnterWorks user logs into EnterWorks, EnterWorks will verify with the IDP that the user exists in the IDP's directory and it will request a list of the groups the user belongs to. For each group on the returned list that exists in EnterWorks, if the user is not in the group, EnterWorks will add them. EnterWorks will then remove the user from any EnterWorks groups that are not on the list returned from the IDP. Automatic provisioning is also known as, Just in Time (JIT) provisioning.