(DOCSP-29556) Add SAML project and org roles steps to the SAML procedure (#5165) (#5167)

* (DOCSP-29556) Add SAML project and org roles steps to the SAML procedure

* Edits

* Copy review

Author: JuliaMongo

source/includes/admonitions/important/ldap-role-guidance.rst

@@ -1,7 +1,7 @@
 .. important::
 
    You must use the fully qualified distinguished name for each
-   group. If multiple LDAP groups correspond to the same role,
+   group. If multiple LDAP or SAML groups correspond to the same role,
    separate them with two semicolons (``;;``). Remove a group
    from a role's field to revoke the group's access for that
    role.

source/includes/steps-configure-saml-authentication.yaml

@@ -232,11 +232,113 @@ content: |
          :authrole:`Global Read Only` role.
        - None
 
-  Click :guilabel:`Save`.
+---
+title: "Click :guilabel:`Save`."
+stepnum: 7
+ref: save-saml
+---
+title: "Log in as a global owner."
+stepnum: 8
+ref: first-user-saml
+content: |
+  Log in to |mms| as a user that is part of the SAML group
+  specified in the |mms| :guilabel:`SAML Global Role Owner` field.
+
+  Upon successful login, |mms| displays your projects page.
+---
+title: "Associate SAML groups with project roles."
+stepnum: 9
+ref: group-level-roles-saml
+action:
+
+  - heading: "To associate SAML groups with roles in a new project:"
+    pre: |
+
+      .. note::
+
+         You must have any :ref:`global role <global-user-admin-role>`
+         to create a new project.
+
+      a. Click :guilabel:`Admin` > :guilabel:`General` > :guilabel:`Projects`.
+
+      #. Click :guilabel:`Create a New Project`.
+
+      #. In :guilabel:`Project Name`, type a name for the new |mms| project.
+
+      #. Enter the SAML groups that correspond to
+         each :ref:`project role <project-roles>`.
+
+         .. include:: /includes/admonitions/important/ldap-role-guidance.rst
+
+      #. Click :guilabel:`Add Project`.
+
+  - heading: "To update the association of SAML groups with roles in an existing project:"
+    pre: |
+
+      a. Click :guilabel:`Admin` > :guilabel:`General` > :guilabel:`Projects`.
+
+      #. In the :guilabel:`Actions` column for a project, click
+         :icon-mms:`ellipsis`, then click
+         :guilabel:`Edit SAML Settings`.
+
+      #. Enter the SAML groups that correspond to each :ref:`project
+         role <project-roles>`. 
+
+         .. include:: /includes/admonitions/important/ldap-role-guidance.rst
+
+      #. Click :guilabel:`Save Changes`.
+---
+title: "Associate LDAP groups with organization roles."
+stepnum: 10
+optional: true
+ref: organization-level-roles-saml
+action:
+
+  - heading: "To associate SAML groups with roles for a new organization:"
+    pre: |
+
+      .. note::
+
+         You must have any :ref:`global role <global-user-admin-role>`
+         to create a new organization.
+
+      a. Click :guilabel:`Admin` > :guilabel:`General` > :guilabel:`Organizations`.
+
+      #. Click :guilabel:`Create a New Organization`.
+
+      #. In :guilabel:`Organization Name`, type a name for the new |mms| organization.
+
+      #. Enter the SAML groups that correspond to
+         each :ref:`organization role <organization-roles>`.
+
+         .. include:: /includes/admonitions/important/ldap-role-guidance.rst
+
+      #. Click :guilabel:`Add Organization`.
+
+  - heading: "To update the association of SAML groups with roles for an existing organization:"
+    pre: |
+
+      a. Click :guilabel:`Admin` > :guilabel:`General` > :guilabel:`Organizations`.
+
+      b. Click the :guilabel:`Edit Org` button.
+
+      c. Enter the SAML groups that correspond to
+         each :ref:`organization role <organization-roles>`.
+
+         .. include:: /includes/admonitions/important/ldap-role-guidance.rst
+
+      #. Click :guilabel:`Save Changes`.
+---
+title: "Add your MongoDB deployments."
+stepnum: 11
+ref: deploy-mongodb
+content: |
+  Specify the SAML authentication settings when :doc:`adding a MongoDB
+  deployment </tutorial/add-existing-mongodb-processes>`.
 
 ---
 title: "Export your |onprem| Metadata."
-stepnum: 7
+stepnum: 12
 level: 4
 ref: export-metadata
 content: |
@@ -262,7 +364,7 @@ content: |
 
 ---
 title: "Import the |saml| SP Metadata into your |idp|."
-stepnum: 8
+stepnum: 13
 level: 4
 ref: import-sp-saml-values
 content: |
@@ -296,7 +398,7 @@ content: |
 
 ---
 title: "Test the |saml| integration between |onprem| and your |idp|."
-stepnum: 9
+stepnum: 14
 level: 4
 ref: test-saml
 content: |