Error Message: The system is not set to allow for auto-generation of new SAML users. Please contact your org admin to grant your access to Jama Connect.

Author:  Kellen Fields

Date: December 2024

Audience:  Everyone

Environmental details: SAML Enabled Jama Connect

Summary

When attempting to log in to Jama Connect via SAML, some users may see the message: "The system is not set to allow for auto-generation of new SAML users. Please contact your org admin to grant your access to Jama Connect."

When this option to auto-generate users is set to 'not allow',  your SAML users (SAML and multi-mode) can’t sign in to Jama Connect until you add them to the Jama user table. This message tells them to finish the authentication process with their administrator.

Solution

In some instances, users may feel they exist in both Jama Connect and the Identity Provider (IDP) but are still receiving this notification. It is important to note that Jama Connect matches user email addresses through the Name ID attribute. Please ensure that the email address used in SAML authentication exactly matches the one associated with the user in Jama Connect.
If the email address provided differs from the one in Jama Connect, you will receive this message because the system thinks it is creating a new user account.

Any extra spaces or misspellings issue. Ensure that the email matches both what is in Jama Connect and what is on the Identity Provider (IDP). can cause this 

Prevention

Ensure the user has been created within Jama Connect and your IDP. Otherwise, it will allow for the auto-generation of new SAML users.