After a successful configuration, you can click the Log On with IDP option on the ePO - On-prem logon page (Service Provider initiated SSO), or click the configured application in the IdP console (Identity Provider initiated SSO), to test the logon option.
On successful authentication, you are navigated to a page that displays the following message — SAML authentication is successful. Close your browser to end your session and contact your administrator for ePO permissions grant..
You need to request the ePO - On-prem administrator to grant the required permissions.
A new user is created in ePO - On-prem with a user name which is similar to the email address used in your IdP application, the authentication type is set to SAML authentication and no permission sets are assigned.
An administrator has to log on to the ePO - On-prem console and assign the required permissions to the newly created (IdP) user.
Note
Upon successful completion, the IdP user can now access ePO - On-prem via Single Sign-On.