Understanding Just-In-Time Provisioning with SSO

When to Use This Guide
Use this guide when you need assistance with setting up or managing Just-In-Time (JIT) provisioning for Canva Enterprise or Canva for Campus accounts.

What is Just-In-Time Provisioning?
Just-In-Time (JIT) provisioning is a feature that automatically adds users to a team when they log in or sign up using the same Single Sign-On (SSO) account. This streamlines the process of team management and ensures smooth access for team members.

Managing Automatic Team Additions
Why Are New Team Members Being Added Automatically?
- If you notice new members on your team and related charges, it means the JIT provisioning feature is active. This setting adds users who log in via SSO to your team automatically, which may lead to additional charges if your team exceeds its seat count.
How to Prevent Automatic Additions
- To avoid automatic additions and potential charges, you can disable JIT provisioning:

1. Navigate to **Settings** from your homepage.
2. Select the **SSO & Provisioning** tab from the side menu.
3. Uncheck the box labeled **Allow users to sign up via SSO with Just-In-Time provisioning** below the SSO settings.

- Remember, if JIT is disabled, team members need to be manually added using SCIM.

Customizing Team Access with JIT Enabled
Can JIT Be Enabled Without Adding Everyone to the Team?
- Yes, you can control team access while keeping JIT enabled. Modify your Canva SAML app to allow only specific users access and restrict it for others in your identity provider.
- After updating, ensure your SSO settings enforce that only team members require SSO.

Troubleshooting Login Issues
Why Can't I Log in With SSO?
- If you're unable to log in or face errors using SSO, your team admin might have turned off JIT provisioning, preventing new users from being added to the team.
- To resolve the issue, check with your team admin to ensure you're manually added to the team.

We hope this guide helps you efficiently manage your team with Just-In-Time provisioning. If you encounter further issues or have questions, please reach out so we can assist you further. Thank you for engaging with our solutions and efforts to enhance your experience.