Skip to main content
Question

PRA First User Login (Provisioning)

  • December 10, 2025
  • 2 replies
  • 18 views

Forum|alt.badge.img+3

PRA requires a user to login a first time in order to be available in PRA for example to assign vault accounts.

Unfortunately this is causing problems with new employees which are onboarded into PRA.Unless they have never logged in, administrators cannot assign personal vault accounts. If the user logs in, and does not see his/her vault account, they create tickets. This is a very large customer and it is difficult to orchestrate / communicate such a process and they would like to automatically provision new users (from AD).

 

How do other customers provision users up-front and define vault accounts, etc. and not depend on a user’s first login?

 

 

2 replies

Forum|alt.badge.img+1
  • BeyondTrust Employee
  • December 11, 2025

Hello ​@cschaller - it sounds like you may wish to look into setting up the SCIM (System for Cross-domain Identity Management) to automate user and group provisioning, with PRA.  

Details for this are here: https://docs.beyondtrust.com/pra/docs/scim


  • Apprentice
  • December 11, 2025

SCIM doesn't seem to address the main issue which is to assign personal vaults to users without having them sign into PRA first.