Automatically provision users (JIT)

This page explains how to automatically create user accounts when users first log in to Azure Databricks using just-in-time (JIT) provisioning.

What is JIT provisioning?

JIT provisioning in Azure Databricks is a security and provisioning model that automatically creates new user accounts during first-time authentication. When a user logs in to Azure Databricks for the first time using single sign-on (SSO), Azure Databricks checks if the user already has an account. If not, Azure Databricks instantly provisions a new user account using details from the identity provider, such as the user's name and email address. This process, known as JIT provisioning, streamlines onboarding.

JIT provisioning defaults

JIT provisioning defaults depend on when your account was created:

• Default ON for accounts created after May 1, 2025: New users are automatically provisioned upon their first successful login.

• Default OFF for accounts before May 1, 2025: You must enable JIT provisioning if you want new users to be automatically provisioned upon first login.

Enable JIT provisioning

1. As an account admin, log in to the account console and click the Settings icon in the sidebar.

2. Click the User provisioning tab.

3. Select Create new identities during first-time authentication.