1. Integrate the 3scale's admin portal with RH-SSO;
2. Using a valid user account (which hasn't logged into 3scale's before), log into the 3scale's Admin Portal using the RH-SSO Authentication, and wait for the activation;
3. Open a new Web Browser window (e.g. incognito mode), log into 3scale's Admin Portal using a pre-configured admin account, and activate the previous account;
4. Observe error
Some additional info on the issue:
1. It happens when the user doesn't have the Email Verified: ON switch.
2. In the Admin Portal (see admin.png) there is no State in Account > Users page, so you can't tell if the user has some problems with activation.
3. In the Master Portal (see master.png, if you go to the Tenants >
{account}
> Users, you can see that the users is still "pending", and there is an Activate button.
4. Clicking on this button gives an error shown in error-user-activation.png, which says clearly "the change was rejected".
5. BUT, the user DOES actually get activated (despite of what the error said), so this error seems to be a bug.