Existing MRAO, RAO and DRAO administrators that login to CM through the InCommon CM Login page by entering their CM account login credentials can also be enabled for SSO login in two ways:
MRAO administrators and RAO/DRAO administrators with admin creation/editing privileges can enable SSO logins by sending an invitation from the CM interface. The invitation email will contain a link for the administrator to login to CM through the SSO login page.
A confirmation dialog will appear:
An invitation email will be sent to the administrator with a link to access the login page.
The email will come from firstname.lastname@example.org with the subject "Invitation Email - login through an Identity Provider."
Upon clicking the link, the admin account will be activated and the administrator will be taken to the SSO login page for logging-in to the CM using his/her SSO credentials.
An existing administrator can also be enabled for SSO login by specifying the user's identifier (ePPN) in their CCM admin settings.
The 'Edit Client Admin' form will appear: