External Identity Provider | Planning Steps
The Cirrus External Identity Provider is often a solution of last resort (sometimes called an “identity provider of last resort”). It is helpful to consider a few factors before deployment:
Who is the target audience?
Do individuals have a valid email address?
What is/are the Service Providers that will be accessed?
How will password reset be handled?
Sending a reset token to the registered email address is the default configuration.
Configuring reset questions is another option
How will this identity provider be branded?
What will it be called?
Next you will want to look at Cirrus External Identity Provider | Getting Started.