After you have created resource in the Credential Vault, follow the procedure:
On the home page of the console, click Access Control.
In the navigation pane, click User Roles.
In the details pane, click Create. A Create User Role page with General, Included Members, and Excluded Members setting is displayed.
General: Specify the name and description of the user role. Click Next.
Included Members: Click Add to select users from the dropdown list which should be included in the user role.
Browse to users or groups and select a source.
Click Next.
Click Create.
On the home page of the console, click Access Control.
In the navigation pane, click Resource Pools.
In the details pane, click Create. A left pane with Create Resource pool is displayed with General and Resources settings.
In the General settings, specify the following:
Name: Name of the resource pool. Example: appsso-rp3
Description: Add a description. This is not a mandatory field.
Type: Select the type as Applications > Application SSO
Click Next. Resources page is displayed for configuration.
Click Add. Select the resources.
Select or enter the Default Credential. For more information, see Default Credential.
Click Create.
On the home page of the console, click Access Control.
In the access control pane, click Assignments.
In the details pane, click Create.
To create an assignment, you must select a User Role, Resource Pool, and provide a Description. This Description is shown to the users while listing their permissions.
Click on Add and select Application SSO as the permission. For more information, see Section 6.2.5, Configuring Permissions.
Click Create to add the new assignment.
NOTE:After creating the assignment or permissions, you cannot modify the User Role and Resource Pool.
NOTE:Secondary authentication is present in the permission which performs second factor authentication for the application SSO Web session and not the application.