Who can use single sign-on?

RAOs at campuses that used federated identity (e.g. have an identity provider in the InCommon Federatoin) and support MFA locally can use the SSO/MFA feature.

I'm already an RAO and my organization uses SSO and MFA. How do I start using SSO?

Review this wiki page for the process.

My campus is going to subscribe to the Certificate Service and we already use SSO and MFA. What do I need to do to use SSO once we've subscribed?

We don't use SSO now, but it sure sounds like a good idea. How do I do that?

Does InCommon recommend a specific Multifactor Authentication method for use with the Certificate Service?

I'm a DRAO. Why don't I need to use SSO?

We use MFA locally, but I'm not sure about this REFEDS profile. What's that about?