EnterWorks will request that the IDP authenticates users and manages their user group
assignments. When an existing EnterWorks user logs into EnterWorks, EnterWorks will verify
with the IDP that the user exists in the IDP's directory and it will request a list of the
groups the user belongs to. For each group on the returned list that exists in EnterWorks,
if the user is not in the group, EnterWorks will add them. EnterWorks will then remove the
user from any EnterWorks groups that are not on the list returned from the IDP. Automatic
provisioning is also known as, Just in Time (JIT) provisioning.