Setting Up SAML 2.0 Support › How to Set Up SAML Authentication › Completing SAML 2.0 Setup

Completing SAML 2.0 Setup

To enable SAML 2.0 authentication, edit user accounts to use External Authentication. New user accounts in CA Performance Center are set to use Performance Center Authentication by default. The administrator must update the accounts of all operators who authenticate using SAML 2.0.

During SAML2.0 configuration, you specify an existing CA Performance Center user account to be 'cloned' in the IdP. Any users who are already defined on the IdP receive the same level of product privilege as the user account you designate. These accounts are also propagated to CA Performance Center, where they appear as new users in the User List. In many cases, you must edit these accounts to make sure that these users can access only the data they require to do their jobs.

Follow these steps:

1. Log in to CA Performance Center as a user with administrative privileges.
2. Select Admin, User Settings, and click Users.

   The Manage Users page opens.

3. Select a user account to edit.
4. Click Edit.

   The Edit User wizard opens.

5. Select 'External' as the Authentication Type.
6. Use the wizard to make any other desired changes to the user account. For example, advance to the third wizard dialog to select a different Product Privilege for this user.
7. Click Save.

   The changes to the user account are saved.