Assuming the self signup enrollment flow, the researcher begins the flow by authenticating using their home IdP. If the IdP is configured to release attributes and COmanage is appropriately configured, those attributes will be prepopulated into the signup form. Otherwise, and for any additional attributes, the researcher completes the signup form.
The researcher will be asked to confirm control of their asserted email address by clicking a link sent to it.
The collaboration administrator reviews the application and approves the enrollment.
Once approved, COmanage will assign a login ID and write the researcher's record to the LDAP server, effectively creating the researcher's Unix account. As part of the approval process, a notification is sent to the researcher regarding the approval and including the login ID and server address.
The researcher logs into COmanage and uploads their SSH public key.
COmanage adds the public key to the LDAP record.
The research may now log in to the Unix server, using the provided address, login ID, and their existing SSH private key.

Video on this work

Resources

...