Hi Community,
I am trying to implement JIT when a user is not present. But by default it is creating a user as "Company Employee". Any suggestions how I can identify and create either Company Employee or Portal user based on the response that has been received in the SAML token.
I have followed the following two articles:
Thanks,
Sourav Kumar Samal
Like
Dear Sourav,
I would suggest you to carefully check the web.config file located in the root folder of Creatio.
In this file you can find the list of login providers (the place where you enabling JIT by the guide):
<provider name="SsoAuthProvider" type="Terrasoft.WebApp.Loader.Authentication.SSO.SsoAuthProvider, Terrasoft.WebApp.Loader">
<parameters>
<add name="UserType" value="General" />
<add name="UseJit" value="false" />
</parameters>
</provider>
<provider name="SSPSsoAuthProvider" type="Terrasoft.WebApp.Loader.Authentication.SSO.SsoAuthProvider, Terrasoft.WebApp.Loader">
<parameters>
<add name="UserType" value="SSP" />
</parameters>
If you want to enable JIT for portal user you need to make sure that key <add name="UseJit" value="false" /> is added to the block related to the "SSPSsoAuthProvider"
so it looks like:
<provider name="SSPSsoAuthProvider" type="Terrasoft.WebApp.Loader.Authentication.SSO.SsoAuthProvider, Terrasoft.WebApp.Loader">
<parameters>
<add name="UserType" value="SSP" />
<add name="UseJit" value="true" />
</parameters>
After that please make sure that SspLogin.aspx is specified in all keys instead of NuiLogin.aspx to make sure that user will get a proper portal cookie in case if you want to use a Service Provider initiated SSO flow to create portal users.
Also please note that in this case ordinary company employees will have to login via direct link only or use the link to NuiLogin.aspx module if they want to use SSO as well.
Kind regards,
Roman
Roman Brown,
Does this mean we can only use Jit either for Portal User or for Company Employee user?
Regards,
Sourav