Automatically provision users (JIT)
This page explains how to automatically create user accounts when users first log in to Databricks using just-in-time (JIT) provisioning.
What is JIT provisioning?
JIT provisioning in Databricks is a security and provisioning model that automatically creates new user accounts during first-time authentication. When a user logs in to Databricks for the first time using single sign-on (SSO), Databricks checks if the user already has an account. If not, Databricks instantly provisions a new user account using details from the identity provider, such as the user's name and email address. This process, known as JIT provisioning, streamlines onboarding.
JIT provisioning can only be enabled when SSO is configured. See Configure SSO in Databricks.
JIT provisioning defaults
JIT provisioning defaults depend on when your account was created:
-
Default ON for accounts created after May 1, 2025 when SSO is configured: New users are automatically provisioned upon their first successful SSO login.
-
Default OFF for accounts before May 1, 2025: You must enable JIT provisioning if you want new users to be automatically provisioned upon first login.
Enable JIT provisioning
-
As an account admin, log in to the account console and click the Settings icon in the sidebar.
-
Click the User provisioning tab.
-
Select Create new identities during first-time authentication.
