User creation: manual, bulk, self-registration and JIT
The four ways external site users come into being: enabling a contact by hand, inserting User records with Data Loader, self-registration at sign-up, and SAML Just-in-Time provisioning with its Federation ID, Recipient URL, matching order and profile rules, plus contactless External Identity users.
Describe the different ways users can be created, such as manual, Data Loader, Self-Registration, and Just-in-Time (JIT) provisioning.
~8 min read · 10 practice questions ·
What the exam expects
- Compare manual enablement, a Data Loader insert, self-registration and Just-in-Time (JIT) provisioning, and pick one from volume, timing or an existing identity provider.
- Configure standard SAML JIT for a site: User Provisioning Enabled, the Federation ID identity type, the Site Login URL as Recipient, and a profile.
- Predict what JIT does when the assertion matches a user, a contact, an account or nothing.
- Know when a contactless External Identity user fits and what it can't do.
Key terms: external user (a user record tied to a contact or person account that logs in to a site); JIT provisioning (a user created at first SAML login from assertion attributes); Federation ID (the User.FederationIdentifier value JIT matches on); Site Login URL (the site's SAML Recipient, https://domainName/login?so=orgID); contactless user (an External Identity user with no contact).
Key facts
- Detail
- A person account, or a contact on a customer or partner business account
- Detail
- Data Loader Insert on User with ContactID and ProfileID per row
- Detail
- Only with Login Discovery, Visualforce or Default login page types
- Detail
- Assertion contains the Federation ID from the User object
- Detail
- Site Login URL,
https://domainName/login?so=orgID
- Detail
- User.ProfileId must hold a valid profile name or ID
- Detail
- External Identity only; Apex, SOAP or Bulk API 2.0; no Login As
Sources for this section (6)
- Create Experience Cloud Site Usershelp.salesforce.com (opens in a new tab)
- Import Portal Users with Data Loaderhelp.salesforce.com (opens in a new tab)
- Configurable Self-Reg Pagehelp.salesforce.com (opens in a new tab)
- Enable Just-in-Time Provisioninghelp.salesforce.com (opens in a new tab)
- JIT Assertion Fields for Experience Cloudhelp.salesforce.com (opens in a new tab)
- Create Lightweight Contactless Usershelp.salesforce.com (opens in a new tab)
- Which two creation methods need no admin to create the user beforehand?
- Why does a JIT login that matches a contact by Contact.Email not create a new account?
- When must the assertion carry User.ProfileId?
- Why can't the Configurable Self-Reg Page be selected on a site whose login page is an Experience Builder page?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Experience Cloud Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 37 lessons of the Experience Cloud Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (10 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams