To create users that can be authenticated via SAML:
- Create a user for each SAML-authenticating user with the user name set to the SAML EPPN.
- Create a pm_user_param setting authentication_method to SAML.
- Alternately, configure the user registration tool for federated mode, and it will allow users to create an i2b2 account if they have a valid SAML authentication. (Such users will still not have access to any projects until the administrator adds projects to his/her profile.)
Also see the Chapter on Configuring SAML for client/server configuration.