Administrators and managers: SAML SSO-only versus SAML SSO account

When adding administrators and managers to your CertCentral account, you must decide what type of user you need them to be: SAML SSO-only or account.

Administrators

SAML SSO-only administrators:

  • Can only add SAML SSO-only type users to their CertCentral account.
  • Can onlyconvert account users to be SAML SSO-only type users (e.g., SSO-only Administrators, Finance Managers, etc.).

Account administrators:

  • Can add account users and SAML SSO-only type users to their CertCentral account.
  • Can convert SAML SSO-only type users to be account users and convert account users to be SAML SSO-only type users.
  • Can also assign mangers the Allow access to SAML settings permission.

Managers

SAML SSO-only Managers:

  • Can only convert account users to be SAML SSO-only type users (e.g., SSO-only Administrators, Finance Managers, etc.).

Account Manager:

  • Can convert SAML SSO-only type users to be account users.
  • Can convert account users to be SAML SSO-only type users.

DigiCert recommendations

When setting up your CertCentral account, we always recommend you add a minimum of two account administrators. If one of them gets locked out, goes on vacation, etc., there is someone else who can manage your account.