...

You create additional admins (RAOs for your whole organization or DRAOs for departments you have created) under the the Settings → Admins tab with the Add button button. You can also edit existing admins by clicking on the line to check them and then using the Edit button.

• Fill in login (with a suitable user name)username, email, forename and surname. We advice you to leave the rest of the contact information empty, as it is not needed. Save this.
• Select Under the Authentication tab, select "Your institutionInstitution" as Identity Provider and fill in the admin's ePPN ("SWAMID SAML IDP and provide the users EPPN ("federated identity") in IdP Person Id to enable the admin to login via SWAMID when SAML has been set up correctly.A password has to be provided for a the EPPN field. You can also set a password for the new admin. The first time they login they will have to change it.
• Select the desired privileges under Privilegesunder Role & Privileges. Do not check "WS API Use Only" (will be explained later).
• Select the desired roles under Roles which means selecting the right combinations of level role (RAO for your the organization or DRAO for a department you have created) and certificate type (SSL, client or code signing).) in the Roles dropdown. Select the certificate types the admin will be able to manage and use the pencil icon to select organization and/or departments.
• Save when done.
• You When done, you have to communicate the selected password to the new admin (it is not emailed by the system).

...