For systems using Single Sign-On or LDAP authentication, users who have not already been added to the system may unintentionally generate a new Applicant account prior to being assigned the role of Reference or Reviewer. Once the Applicant exists on an account, it cannot be removed. 

Instruct the References or Reviewers to hover their mouse over their name/email address in the top right corner, and to select the appropriate role from the drop down menu. 

To prevent this from happening please see documentation about the Remote Identity API.