...

To use federated login in the SCM portal you need to go into all your current RAO and DRAO admin accounts (Admins) and change the field Identity provider to "Your institution" and the field IdP Person Id to the eduPersonPrincipalName of the admin. Right now there is two known bugs when using the SAML integration. The first and more severe bug is that if you haven't added eduPersonPrincipalName to the admin account matching is done by mail address the first time. The second and only annoying bug is that it If you don't do this manual mapping of eduPersonPrincipalName to the admin account a much more insecure automatic mapping of the mail address at first the first SAML login. Right now there is a annoying known bug when using the SAML integration. The SAML integration picks up the name from the SAML assertion but don't handle character encoding correct.

...