Before you make a CommCell environment an IdP CommCell environment, review the considerations for IdP CommCell environments.
The service CommCell environments that you add to the IdP CommCell environment must be Feature Release 21 or a more recent release.
If you enabled two-factor authentication on a service CommCell environment at any level, after you add the service CommCell environment to the IdP CommCell environment, you must enable two-factor authentication again.
If the IdP CommCell environment and the service CommCell environment are behind a firewall, either in the same network or in different networks, you must do the following:
Register the service CommCell environment on the IdP CommCell environment. For information, see Registration of a Remote CommCell Environment.
On the IdP CommCell environment, open the following ports:
80
81
443
On the service CommCell environment, open the following ports:
80
443
Users and User Groups
The users of the service CommCell environments can access the CommCell Console only from the Applications page of the Web Console.
If multiple users have the same user name but different email addresses and are associated with either two service CommCell environments or a service CommCell environment and its IdP CommCell environment, then the users cannot log on to any CommCell environment using their email addresses.
If a user is a member of the master user group on any CommCell environment, then the user gets the permissions of the master user group on the IdP CommCell environment and on the service CommCell environments that are added to that IdP CommCell environment.
To add or modify a user or a user group on a service CommCell environment, you must have permission to add or modify a user or a user group, on both the IdP CommCell environment and the service CommCell environment.
If multiple user groups on two service CommCell environments have the same name, then the user groups are combined into one user group on the IdP CommCell environment.
Associations
You can manage the association of a user to a user group on the IdP CommCell environment. If you modify the user group association of a user that existed when you added the service CommCell environment, then the modifications are also applied on the service CommCell environment.
The security associations of a user apply only on the service CommCell environment and not on the IdP CommCell environment.
If you perform a bulk import of users into a service CommCell environment, you must either add or recover the associations on the IdP CommCell environment.