• On the Protocol Settings screen, choose whether to only validate incoming SAML tokens or to validate and then also generate local tokens to enable SSO access to web services at your site.

    If you choose to generate local tokens as well, you must set up at least one token generator.