Outbound provisioning

Outbound provisioning automatically provisions user accounts from Asgardeo to external systems. When enabled, user lifecycle events such as creation, updates, and deletion are synchronized in real-time with connected applications.

Provisioning levels

Asgardeo lets you configure outbound provisioning at the following levels:

• Organization-level: Organization-level outbound provisioning acts as the default provisioner for all applications. You can override this by configuring an application-level outbound provisioner. With organization-level outbound provisioning, users are automatically provisioned to external systems when:

  • a user is provisioned in Asgardeo over an API.
  • an administrator onboards a user from the Asgardeo Console.
  • a user self-signs up from a Asgardeo login page.
  • a user is JIT provisioned in Asgardeo.

• Application-level: Application-level outbound provisioning is specific to an individual application. If an application does not have its own outbound provisioner configured, it defaults to the organization-level outbound provisioner. When application-level provisioning is enabled, users are automatically provisioned to the external system when:

  • a user is created using a token retrieved by the application.
  • a user is JIT provisioned through the application.

Group-based provisioning

In addition to provisioning levels, you can refine your provisioning criteria by managing which users are provisioned based on their assigned groups. Group-based provisioning can be applied alongside both organization-level and application-level provisioning to further filter which users are provisioned based on group membership.

Learn more about group-based provisioning.

Outbound connectors

Asgardeo supports provisioning users via SCIM2.