Provision users to use SSO

When provisioning new users, you can set them to use SSO by assigning them to an SSO security policy. If you are using a SAML User ID Type of Federated ID, you must set the Federated ID value in the user profile. Note that Federated IDs must be unique within a domain.

About SAML user ID types

In the Single Sign-On Settings, there are two options for the SAML User ID Type setting:

Option	Use
Network User Name	Use if you plan to store Network MDM user name as an attribute in your IdP user directory, or if the Network MDM user name happens to exactly match your enterprise user names. This puts the burden on the IdP to map enterprise user name to Network MDM user name.
Federation ID	Use if you plan to store enterprise user name in the Federated ID field on the Network MDM user profile. This puts the burden on Network MDM to map from enterprise user name to Network MDM user name.