JasperReports Server automatically creates the new external user account when the user first accesses the server. As long as the user relies on existing roles in an existing organization, no server changes are required. If the user is associated with new roles, see Managing External Role Definitions.

JasperReports Server doesn't store the passwords of external users, and is not affected by changes to user passwords or policies on the external authority.

With the default mapping of external users, only the login name is stored in an external user account. If you configure role mapping based on personal information in the external user entry, you need to account for any possible change in the content or structure of the external authority. For example, if a role is based on a user’s department attribute, make sure the user can't modify this attribute in the external authority. Otherwise, the user could inadvertently or maliciously change his or her roles within JasperReports Server.

Described in Managing External Role Definitions.

When organizations represent departments within a company, a user may change organizations, as mapped from the external authority. From JasperReports Server’s point of view, this is the same as deleting a user in the old organization and creating a user in another organization.