User management
Users in a user pool represent the end users who log in to your AI Agent application. This topic describes how to view user information and delete users in a user pool.
User sources
Users in a user pool are automatically created through the Just-in-Time (JIT) provisioning mechanism from a SAML identity provider. When an end user logs in for the first time through an external SAML identity provider using SSO, the system automatically creates a corresponding user in the user pool based on the attributes in the SAML assertion.
User pools do not currently support manual user creation. All users are automatically created through JIT provisioning from a SAML identity provider.
Users in each user pool are isolated from each other. When the same user from an external identity provider (IdP) logs in to different user pools, a separate user is created in each user pool.
View users
You can view all created users and their attributes in a user pool.
Log on to the AgentIdentity console.
In the left-side navigation pane, choose .
Click the name of the target user pool to open its details page.
Click the Users tab.
The user list displays the following information:
Username: The user identifier obtained from the NameID in the SAML assertion.
Source identity provider: The name of the SAML identity provider that created the user.
Creation time: The time the user was created through JIT provisioning upon their first SSO login.
Delete a user
If a user no longer requires access to the AI Agent application, you can delete them from the user pool.
Deleting a user also removes all their role assignments. This action is irreversible. If the user logs in again through SSO, the system creates a new user record that does not retain the previous role assignments.
In the user list, find the target user and click Delete in the Actions column.
In the confirmation dialog box, click OK.