AWS ALB & Amazon Cognito Authentication Setup Guides User Provisioning Current: User Provisioning with UserSync User Provisioning with UserSync GoalAfter following this tutorial, you will have set up UserSync together with our AWS app. UserSync will create or update the user during login with the data from your Identity Provider.If you need a Just-In-Time setup (create/update users with the claims sent by the load balancer), please see here.PrerequisitesAWS ALB & Amazon Cognito Authentication version >= 2.xA configured UserSync connector. Please find the latest documentation for this here https://wiki.resolution.de/doc/usersync/latestStep-By-Step GuideAfter setting up a UserSync connector, please follow these steps:Go to the AWS ALB & Amazon Cognito Authentication configuration and scroll down to the User Provisioning section. Tick Update with UserSync to show the UserSync settings.Click the Which UserSync connector do you want to use?. Dropdown and choose the connector you have configured before (Okta for this example). If you haven't configured the connector yet, make sure to follow the corresponding guide:Azure ADGoogle Cloud IdentityKeycloakOktaOneLogin Now, we must configure the UserSync lookup attribute. This is how UserSync searches remotely for the user. The value depends on the identity provider. Please see the table below for the respective value:AzureOktaGoogle Cloud IdentityAWS CognitoKeycloakAttribute name to be usedoid or upn (preferably oid)emailemailemailemailClick Edit to continueIf you need to adjust the value, click Edit and replace the standard configuration with the name from the table above.Save your configurationWhen logging in, your user should now be updated or created by the UserSync connector. SAML Single Sign-On is available for Atlassian Server & Atlassian Data Center products. Our Jira Data Center, Confluence Data Center, Bitbucket Data Center, Jira Server, Confluence Server, Bitbucket Server and other apps are all available on the Atlassian Marketplace.