...
- the Self registration based on entitlement: add admins to CAT institutions NRO option needs to be set;
- the user has to login with an eduGAIN registered IdP;
- user's SAML data must contain the paritiespairwise-id attribute and do not contain the eduPersonTargettedAttribute (this second condition may become unnecessary in the future);
- user's SAML data must contain the eduPersonEntitlement attribute with the appropriate value (see the note below for the explanation of "appropriate").
...