How To Setup SSO to provide access to a Group of users only

Document ID : KB000115123
Last Modified Date : 17/09/2018
Show Technical Document Details
How to Setup SSO Config so that only users that belong to a specific Group  like CN=[Groupname] has access to Performance Center
Set the Default User Clone like {sAMAccountName} 
So if the user doesn't have an account already in PC, it will not get it.
Then anyone in the group CN=[Groupname] will get cloned from the default "user" account