...
- A site administrator for an organization may not function as a delegated administrator for the same organization.
- A delegated administrator for one organization may not function as a delegated administrator for another organization.
- Assigning two delegated administrators to the same entity descriptor can have undesirable side effects since the editing of entity descriptors is not constrained by the software in any way.
- A site administrator can not unconditionally delegate responsibility for administering SP metadata; that is, a site administrator must always approve update requests made by a delegated administrator.
- ProtectNetwork no longer releases attributes to the Federation Manager, so ProtectNetwork can no longer be used by delegated administrators to log into the Federation Manager.
For the Site Administrator
...