Hi Hal & Chris,
To configure the SAML Authentication, you must contact CA Technologies Support. In an On Premise deployment, Microsoft Active Directory Server that has the complete functionality is supported. Alternatively, SUN (Oracle) Directory Server is supported but without the role-mapping feature.
Regards,
Rosy