We want to use OpenId SSO for our Salesforce Community Users provisionning and I was wondering if Salesforce supports JIT (just in time provisionning) over OpenID (contact + account + user creation upon first login).

I didn't find any doc about that specific feature but I was wondering if it exists with an other naming or an other approach?

From what I understand the

Auth RegistrationHandler Interface

should provide this capacity for OpenId but can someone confirm ?


1 Answer 1


After some testing I can confirm that Auth RegistrationHandler Interface is perfectly fulfilling JIT provisionning for Community (even if the doc is not clearly stating about this use case).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .