SAML admin certificate requests guide
Use the Security Assertion Markup Language (SAML) Certificate Requests feature to connect your identity provider (IdP) with CertCentral so that non-CertCentral account users can use their Single Sign-on (SSO) credentials to order a client certificate.
Instead of adding someone to your account just to order a client certificate, send them your SAML Certificate Requests URL. Once authenticated, they have access to their own Certificate Requests account where they can request and manage their client certificate (by checking their order status, downloading a copy of their certificate, and other ways).