Nextiva Contact Center - Automatic User Creation via Single Sign-On (SSO)

Article 000004139 · Updated Aug 5, 2026 · 111 views

Automatic User Creation

Automatic user creation lets people sign in to NCC via single sign-on (SSO) for the first time without an administrator precreating their account. The first time someone authenticates, NCC creates their user account using details provided by their identity provider, such as Azure, Google, Okta, Salesforce, or ServiceNow.

Configuration Steps

  • Enable Automatic User Creation

  • Assign a User Profile

  • Assign Queues (Optional)

Only administrators can configure Automatic User Creation.

What Automatic User Creation Does and Does Not Do

 

Does / Does Not

Description

Does

Create a new NCC user when someone signs in successfully through SSO, provided no existing user matches them.

Does

Let administrators choose which profile new accounts receive and optionally place accounts into one or more queues immediately.

Does

Support both OAuth-based SSO (Azure, Google, Okta, Salesforce, ServiceNow) and SAML-based SSO, regardless of whether you configured it via tenant-level SSO settings or the OAuth SSO Connection object.

Does not

Keep an existing user's details in sync if something changes on the identity provider side.

Does not

Deactivate or remove a user from NCC just because they were removed from the identity provider.

Does not

Pull group, role, or queue assignments from the identity provider.

 
 
 

Note: This feature only triggers at sign-in. NCC never checks your identity provider on its own. If someone is removed from your identity provider, they won't be able to sign in again; their existing NCC account is left untouched. Deactivating or deleting NCC accounts is still a manual step for administrators.

Before You Enable Automatic User Creation

This is a tenant-wide setting, not tied to any single SSO provider. Turning it on affects every SSO method configured for your tenant — so even if you consider only one identity provider, all will be affected.

One thing to check beforehand: newly created accounts always get lowercase usernames. If users in your tenant already have usernames with capital letters (for example, Jane.Doe@example.com), the next SSO sign-in may not match them to the existing account and could create a second account. If your tenant isn’t brand new, have your Nextiva representative check this before you enable automatic user creation.

Configuration Steps

To turn on Automatic User Creation, follow these steps:

Enable Automatic User Creation

  1. Log in to NCC as an administrator.

  2. Click the Options Menu icon.

  3. In the “Search…” field, enter the word “Tenant”.

  4. Click the Tenant icon.

  5. Click the ellipses () in the header.

  6. Click OAuth Sign-Up.

  7. Switch on the Automatic User Creation toggle.

Assign a User Profile

  1. Click the file icon above the User Profile Identifier field.

  2. Click the radio button next to the profile that should be applied to new accounts.

Note: If you skip this step, new users default to the Agent profile. Since this profile controls what a person can do the moment they land in NCC, it's worth choosing rather than letting it fall back to the default.

Assign Queues (Optional)

  1. Click the file icon above the Queues field.

  2. Click the checkbox(es) next to the queue(s).

Note: You don't have to assign any queues. If you leave it blank, new users are created without any queue assignments, and you can always add them later.

Your changes will be saved automatically.

What a Newly Created User Looks Like

When Automatic User Creation makes a new account, that account:

  • Is active immediately, so the person can start using NCC in the same session they signed in.

  • Has a username taken from their email address, always in lowercase.

  • Receives the profile set in User Profile Identifier, or the Agent profile if that field was left blank.

  • Joins any queues assigned, if applicable.

  • Includes first name, last name, and language automatically, whenever the identity provider supplies that information.

Note: Occasionally a user gets created, but the queue assignment doesn't go through — the account itself is still fine and usable. If someone reports they can't see the queues they expect, that's the likely cause, and you can just add them manually.

When a User Is Not Created

There are a few situations where NCC will intentionally refuse to create an account. In each case, the sign-in attempt simply fails rather than leaving behind a half-created user.

 
 
 

Situation

What the person sees

What to do

Their email isn't verified with the identity provider

Sign-in fails

Have them verify their email address with the identity provider, then try again. This is the most frequent cause of sign-in failures.

The User Lookup Field doesn't resolve to a real email address

Sign-in fails

Confirm that the User Lookup Field is pointed at an attribute that actually holds an email address, and that it's populated for this person

Someone with that email already has an account in a different NCC tenant

Sign-in fails

Since email addresses are unique across all of NCC, either use a different address for this tenant or reach out to Nextiva Support to relocate the existing account.

The email belongs to a Nextiva system administrator

Sign-in fails

This is expected. Nextiva's own administrator accounts can never be auto-created into a customer tenant. A regular account should be used instead.

The sign-in is actually part of connecting a mailbox, not logging into NCC

No account is created

This is expected. Connecting an email account is a separate action and doesn't create an NCC user.

 
 
 

Note: If someone still can't sign in after ruling out everything above, reach out to Nextiva Support with the tenant name, the person's email address, and roughly when they tried.

Still need help with this?
Contact support