---
title: "SSO - Just in Time"
slug: "sso-just-in-time"
updated: 2024-01-30T20:15:02Z
published: 2024-01-30T20:15:02Z
canonical: "wiki.cobblestonesoftware.com/sso-just-in-time"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://wiki.cobblestonesoftware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSO - Just in Time

### Setting up Just in Time (JIT) with Single Sign-On (SSO)

To navigate to the JIT setup page, click Manage/Setup, Application Configuration, then select any of the options. Under the side menu, the "SSO - Just in Time" option will appear. Click this option.

![Navigate to Manage/Setup > Application Configuration > Select Config Settings > Just in Time appears under side menu](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/image-1666286625888.png)

Once on the setup page, select **Manage** for the active SSO process.

![Click Manage for the active SSO process](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/63.png)

There are two (2) sections for JIT setup: Settings & Definitions.

**Settings**

a. These options allow the user to define if JIT is enabled, triggered for updates (each time a user logs in), overwrites previously assigned Security Groups, and controls on attribute data.

![These options allow the user to define if JIT is enabled](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/SSO%20JIT%20Settings.PNG)

**Definitions**

a. These allow the user to define what happens when a user logs in for the first time, or each time that user logs in.

b. A Definition has four areas/parts:

- General

![Definitions - General](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/SSO%20JIT%20Definitions%20General.PNG)

- Conditions

![Definitions - Conditions](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/SSO%20JIT%20Definitions%20Conditions.PNG)

- Field Map
  - This is used to define which field, in CobbleStone®, an attribute value goes, or a default value placed in a field in CobbleStone®.

![Definitions - Field Map](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/SSO%20JIT%20Definitions%20Field%20Map.PNG)

- Security Group
  - This allows for an attribute value to help define which Security Group a user should be assigned to using Rules.

![Definitions - Security Group](https://cdn.document360.io/e3626857-1fb5-4e27-b278-2d3fc5508be4/Images/Documentation/SSO%20JIT%20Definitions%20Security%20Group.PNG)