What type of integration does Just-in-time provisioning primarily rely on?

Just-in-time provisioning primarily relies on Active Directory integration. This method allows for the automatic creation of user accounts in an application when the user first attempts to access that application. When a user logs in through a service that leverages Active Directory, the integration checks if the user already exists in the application. If it does not, the system dynamically creates that user account based on the information retrieved from Active Directory.

This process streamlines user management by ensuring that accounts are created only when necessary, avoiding clutter and maintenance of inactive accounts. Furthermore, it helps in ensuring that user attributes and group memberships are properly synced from Active Directory, which is often the core identity store in enterprise environments.

In contrast, other options such as cloud storage integration, third-party authentication, and single sign-on services do not specifically focus on user account creation upon first access in the same way that Active Directory integration does. They each serve different purposes within a cloud and identity management ecosystem, making them less aligned with the just-in-time provisioning model.