Yes. Support can enable JIT for new users with known domains within your account. When new users log in for the first time, a CloudSploit account will be provisioned for them and they will be added to the "Default" group. From there, an account admin can modify the new user's permissions and group membership.