...

How can we prevent confusion when students missing a CCCID experience the redirect to OpenCCC?

Explaining the proxy and OpenCCC redirect for students missing a CCCID in advance is extremely important.  Identifying students missing a CCCID from your SIS and notifying them to obtain a CCCID in advance is also helpful.  The below URL gives you a direct mechanism to link your student ID's to a CCCID if it's missing.

link to similar page as CAP url: CAP/Admin2 URLs

...

IT 

Are we integrated with the proxy?  What should we do to make sure we are ready to access Canvas through the SSO Proxy?

Make sure you are passing the correct values for the eduPersonAffiliation SAML attribute.  If you are pulling this value from your SIS, it's important to note that your staff could also be listed as students which would require them to have a CCCID.  To avoid this, remove the student value from LDAP or educate staff/faculty that they will experience the OpenCCC redirect.  

Check to make sure students that have a CCCID in your SIS also have that value listed in LDAP.