Outbound provisioning is not working for users JIT provisioned from Federated authenticators

[sandushi]

Describe the issue:

• The JIT provisioned users from the federated authenticators to the IS are nor properly outbound provisioned to the third party even though the outbound configuration is done.

How to reproduce:

1. Create a Google connection and enable jit provisioning.
2. Create and outbound connector with SCIM2 connector and enable it.
3. Configure the outbound provisioning under login and registration section.
4. Create an application and add the google authenticator in the login flow.
5. Try to login to the application with google connection.
6. The user is created in IS , but not properly outbound provisioned to the third party.

Expected behavior:

The users through the federated authenticators should outbound provisioned to the third party connector as well.

Environment information (Please complete the following information; remove any unnecessary fields) :

• Product Version: IS 7.0.0
• OS: [e.g., Windows, Linux, Mac]
• Database: [e.g., MySQL, H2]
• Userstore: [e.g., LDAP, JDBC]

---

Optional Fields

Related issues:

Suggested labels:

[sandushi]

Analysis

• We need to enable the jit property in the outbound provisioning configuration to ensure this use case works properly, as provisioning is currently being skipped when this property is set to false [1].
• However, the current outbound provisioning configuration does not have UI support to enable this property.

• We need to provide a way to configure this option to ensure the use case functions as expected.
• In product IS 6.1.0, we have provided this capability with Enable JIT config in mgt console. [2]

[1] https://github.com/wso2-extensions/identity-outbound-provisioning-scim2/blob/fd50b41cd5370ee9c551f9b4c5009173373e5b41/components/org.wso2.carbon.identity.provisioning.connector.scim2/src/main/java/org/wso2/carbon/identity/provisioning/connector/scim2/SCIM2ProvisioningConnector.java#L116 [2] https://is.docs.wso2.com/en/6.1.0/guides/identity-lifecycles/outbound-provisioning-with-scim/#configure-outbound-provisioning