An external user can be assigned to more than one IdP role. When a user logs into a cloud portal through a third-party ID provider, their user account is mapped to their IdP roles in the portal.
After the user logs in with the third-party ID provider, the roles connected to the user's account determines their access to the portal.
If no roles are assigned to the account, a blocker message appears.
If only one role is assigned to the account, the user proceeds directly to the portal.
If multiple roles are assigned to the account, the Your Roles page opens, and the user must select a role before proceeding to the portal.
The Your Roles page appears as a pop-up window in the Account menu of the Asset Management portal.