At the moment RHOAM will automatically set up Portal SSO using RHSSO as a proxy to the OpenShift IDP on the default 3scale tenant.

There is no User Management on subsequent tenants. We need to investigate how we might replicate Portal SSO for subsequent tenants using the same config as the default tenant. 

We also need to investigate other User Management options for RHOAM that might be inline with customer expectations, such as connecting to a custom IDP via user SSO. 

The scope of this EPIC should also cover authentication options for API Calls (APICast) with user sso. Again, focusing on the options that might be more common with customers