External IdP roles

External IdP roles allow external users to log in to a cloud portal using their organization’s user credentials with a third-party ID provider. External IdP users are authenticated by their organization's ID provider. After the user is authenticated, they can access the cloud application based on their role.

IdP roles is a limited beta feature. New enrollment requests are not available at this time.

When an IdP user clicks Logout, they are only logging out of the portal, not their organization's ID provider.

This section contains the following topics:

• Adding external IdP roles

• Selecting IdP roles