To Enable Auto-creation

Before You Begin

You must configure the attribute mapper on the identity provider side to include an AttributeStatement from the user. The account mapper on the service provider side will perform user mapping based on the AttributeStatement.

1. Enable auto Federation for the Identity Provider. For more information, see To Federate Disparate Accounts with Auto Federation.

2. Click Save.

3. Repeat the above steps to modify the service provider's extended metadata.

4. Enable Dynamic Profile Creation using the OpenSSO Enterprise console.

   1. Log in to the OpenSSO Enterprise console as the top-level administrator, by default, amadmin.

   2. Under the Access Control tab, select the appropriate realm.

   3. Select the Authentication tab.

   4. Select Advanced Properties.

   5. Set User Profile to Dynamic or Dynamic with User Alias and click Save.

   6. Log out of OpenSSO Enterprise.

5. To test, invoke single sign-on from the service provider.