Update how-to-create-compute-instance.md

Author: vijetajo

articles/machine-learning/how-to-create-compute-instance.md

@@ -428,8 +428,21 @@ As an administrator, you can create a compute instance on behalf of a data scien
 
 * [Azure Resource Manager template](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts/microsoft.machinelearningservices/machine-learning-compute-create-computeinstance).  For details on how to find the TenantID and ObjectID needed in this template, see [Find identity object IDs for authentication configuration](../healthcare-apis/azure-api-for-fhir/find-identity-object-ids.md).  You can also find these values in the Microsoft Entra admin center.
 
-To further enhance security, when you create a compute instance on behalf of a data scientist and assign the instance to them, single sign on (SSO) will be disabled.
+To further enhance security, when you create a compute instance on behalf of a data scientist and assign the instance to them, single sign-on (SSO) will be disabled during creation.
+
+:::image type="content" source="media/how-to-create-compute-instance/pobo-creation.png" alt-text="Screenshot shows SSO is disabled during creation of compute instance.":::
+
 The assigned to user needs to enable SSO on compute instance themselves after the compute is assigned to them by updating the SSO setting on the compute instance.
+Here are the steps assigned to user needs to take. Please note creator of compute instance is not allowed to enable SSO on that compute instance due to security reasons.
+
+1. Click on compute in left navigation pane in Azure Machine Learning Studio.
+1. Click on the name of compute instance where you need to enable SSO.
+1. Edit the Single sign-on details section.
+
+    :::image type="content" source="media/how-to-create-compute-instance/pobo-sso-update.png" alt-text="Screenshot shows SSO can be updated on compute instance details page by the assigned to user.":::
+   
+1. Enable single sign-on toggle.
+1. Save. Updating will take some time.
 
 ## Assign managed identity