---
title: User Provisioning Pathways
url: https://docs.kaltura.com/docs/rich-media-cms-apis/content-management/user-management-user-provisioning-pathways
---

## User Provisioning Pathways


Users are created through several pathways:

| Pathway | How It Works | userId Format |
|---------|-------------|---------------|
| **API** (`user.add`) | Direct creation via API v3 | You set the `id` field |
| **CSV bulk import** | `user.addFromBulkUpload` with CSV file | From CSV column |
| **JIT via AuthBroker** | SSO login auto-creates user if `createNewUser: true` | From IdP `userIdAttribute` (typically email) |
| **Events registration** | User Profile API creates user internally if needed | Email address |
| **KMC admin UI** | Manual creation in Management Console | Email address |

### Shared Users (SSO)

When Auth Broker provisions a user via SSO, it sets `externalId` on the KalturaUser to the value from the IdP's `userIdAttribute` (typically the email). This `externalId` becomes the shared key for looking up users across SSO logins.