If you are already running an active Address Manager in production and manage users with Address Manager or external authenticators, follow these steps: Converting User groups into SSO groups Configuring Address Manager as a Service Provider Creating SSO groups Configuring the IdP metadata and Enabling the SSO connection Testing the Single Sign-On Connection Configuring the Authorization Server Enabling SSO Enforced Mode