Users in a user pool represent the end users who sign in to AI Agent applications. This topic describes how to create users, update user information, view user information, and delete users in a user pool.
User sources
A user pool supports the following user sources: users automatically created and updated through JIT (Just-In-Time) provisioning from SAML 2.0 or OIDC identity sources, users manually created by an administrator in the console, and users synchronized from identity sources such as the IDaaS Application Identity Service, DingTalk, Lark, WeCom, and generic SCIM.
JIT provisioning: When an end user signs in for the first time through a SAML 2.0 or OIDC identity source by using SSO, the system automatically creates the corresponding user in the user pool based on the attributes from the identity source. The system can automatically update the user information on subsequent sign-ins.
Manual creation in the console: An administrator creates a user directly from the user list in a user pool. This method applies when no identity provider (IdP) is available or when you need to perform quick integration tests. For more information, see Create a user.
Active user synchronization from identity sources: Includes the IDaaS identity source, generic SCIM protocol identity sources, DingTalk, Lark, and WeCom.
Users in each user pool are isolated from one another. When the same user from an external IdP signs in to different user pools, the system creates a separate user in each user pool.
Create a user
When no IdP is available or you need to perform quick integration tests, manually create a user in the console. After the user is created, the system automatically assigns the default role. You can adjust the role assignment in role management.
Prerequisites
A user pool has been created.
Your account has management permissions on the target user pool.
Procedure
Log on to the Agent Identity console.
In the left navigation pane, select .
Click the name of the target user pool to open its details page.
Click the Users tab, and then click Create user.
In the Create user panel, enter the user information, and then click Create user.
User parameter descriptions
View users
You can view all created users and their attributes in a user pool.
Log on to the Agent Identity console.
In the left navigation pane, select .
Click the name of the target user pool to open its details page.
Click the Users tab.
The user list displays the following information:
User name: The unique identifier of the user in the user pool. The name of a JIT-created user comes from the NameID in the SAML assertion. For a manually created user, the administrator enters the name.
Source identity provider: The name of the SAML identity provider that created the user. This column is empty for manually created users.
UserType: The source from which the user was created. The system records this value automatically, such as Manual, Sync from JIT, or Sync from IDaaS.
Created at: The time when the user was created. For a JIT-created user, this is the time of the first SSO sign-in. For a manually created user, this is the time when the administrator created the user.
Update user information
Edit the user display name, email address, or description individually from the user details page. You can also enable or disable the account by using the Status field. System-managed fields, including the user name, UserType, Created at, and Updated at, cannot be modified.
Procedure
Log on to the Agent Identity console.
Click the name of the target user pool to open its details page.
Click the Users tab.
In the user list, click the name of the target user to open the user details page.
In the Basic Info section, click Edit to the right of the target field, make the change in the dialog, and then click OK.
Field descriptions
Delete a user
Delete a user from the user pool when the user no longer needs access to the AI Agent application.
Deleting a user also deletes all role assignments for the user, and the action cannot be undone. If JIT provisioning is enabled and the user signs in through SSO again, the system creates a new user record without the previous role assignments.
In the user list, find the target user, and in the Actions column, click Delete user.
In the Delete user dialog, enter the user name as prompted, and then click Delete user.