With the new contact setting Provisioned by, a Catchpoint-provisioned contact can easily be converted to an identity-provider-provisioned contact.
This setting enables the following:
- Determines which other Contact settings are editable vs. read-only
- Determines what is displayed for System Access and Test Access
- Allows an admin to change whether a user is provisioned by catchpoint or the IDP
The options for the Provisioned by setting are as follows:
- Provisioned By: Identity Provider
- Indicates this is an SSO-only contact (can log in with namespace only.)
- Displays the URL of the Identity Provider Issuer from the SSO properties page
- Some settings uneditable. If Contact was previously Provisioned by Catchpoint, then the following saved settings become "last access."
- Division
- System Access
- Test Access automatically set to "All" (any configured restrictions removed).
- email address
- Provisioned By: Catchpoint
- Can log in with either namespace and password
- All contact settings are editable, and contact properties configured in the portal override the identity provider assertion
Exception:
- Users with the Client Admin user role cannot have Provisioned By set to Identity Provider.
Note that changing a Contact's Provisioned By status changed from Identity Provider to Catchpoint will trigger an invitation-email to the Contact so that they can confirm and activate their account.