Hi @JuanaMaria

Seamless use of SSO for DM involves 2 things.

First is logging to DM using SSO configuration with operator ID of Pega platform.

Second is once logged in to DM environment, able to see or take action on pipeline in the portal as DM user.

With current versions of DM only first part is supported where you can configure SSO to use DM provided PegaDeploymentManager:Administrator accessgroup and user will be able to login to DM application.

But DM user will not be created automatically on SSO login and using DMRelaeaseAdmin operator ID you need to create the respective user manually in DM portal, post that he can see the pipelines or take action based on role assigned to him.

In our upcoming version which might get released by this month end or early next month, SSO is fully supported and on configuration of SSO, seamlessly DM user and his privilege will be configured.(you will be given help doc to set up SSO). No manaul creation of DM user.

If you can wait till our next release then you can use seamlessly SSO supported DM. Otherwise you can go ahead with implementation of SSO with PegaDeploymentManager:Administrator accessgroup attribute and you have to change this with relevant access group in SSO when our new DM version gets out which matches your first option out of 3 you mentioned above.