JIT - JustInTime

The users are created upon their login (via SAML) to the system with their mapped active directory profile fields values.
In case the user already exists, his profile information will be updated.



SCIM - System for Cross-domain Identity Management

https://scim.cloud/

SCIM is an on-going automated users' provisioning method, which constantly sends users' profile updates from the customers' application to Qmarkets.

SCIM Creates/updates/blocks customer's users in Qmarkets application.

These updates are sent every ~40 minutes.




The JIT method has a few cons vs. using SCIM:

  • Until a user tries to login, the application is not aware of him/her. This means that this user cannot receive any emails from the application, cannot be invited to campaigns, cannot be tagged/mentioned in comments, etc.
  • In case any of the user's details have changed in the IDP, until the user re-login to the application, the user's information will not be updated (example: if the user changed department / country, etc.).
  • In case a user left the company and no longer in the IDP - they will remain as Active in the Qmarkets application.