User Provisioning Pathways - Content Management
User Provisioning Pathways
Users are created through several pathways:
| Pathway | How It Works | userId Format |
|---|---|---|
API (user.add) | Direct creation via API v3 | You set the id field |
| CSV bulk import | user.addFromBulkUpload with CSV file | From CSV column |
| JIT via AuthBroker | SSO login auto-creates user if createNewUser: true | From IdP userIdAttribute (typically email) |
| Events registration | User Profile API creates user internally if needed | Email address |
| KMC admin UI | Manual creation in Management Console | Email address |
Shared Users (SSO)
When Auth Broker provisions a user via SSO, it sets externalId on the KalturaUser to the value from the IdP's userIdAttribute (typically the email). This externalId becomes the shared key for looking up users across SSO logins.