Versions Compared

Old Version 1

changes.mady.by.user Phillip Hanegan

Saved on

compared with

New Version 2

changes.mady.by.user Phillip Hanegan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


...


In SAML transactions, identity providers make an assertion about an authenticated user's identity, encrypt and sign the assertion, and pass that data to a service provider. The service provider receives the assertion, validates and decrypts it, and makes an access control decision, granting or denying access to services as appropriate.

...

One component of an assertion is the attribute statement. Identity providers send attribute statements to service providers to convey information about the subject of the assertion. The SAML specification allows these attributes to be any type of agreed-upon information. Thus if you have a partnership with a service provider requiring a specific attribute be sent (such as a Person's EmployeeID), you must add a SAML Attribute Statement with the required SAML attribute to your assertion.

In this topic we demonstrate how to add an attribute statement to an SSO connection, and a new attribute for the attribute statement.

To add

Add a SAML Attribute Statement to a SAML SSO Connection

  1. In On the navigation sidebar, expand Admin, thennavbar, expand Apps and Authentication > SSO Connections, and click SAML.
  2. Search for the SAML Connection to which you want to add the SAML attribute statement , and click the drop-down arrow beside it, and then click Edit Display Name link for it. 
    Image Removed
    Image Added


  3. This opens On the Edit Connections Details page for the SSO Connection. From this page you can edit the properties of the connection.
    Image Removed
    From the edit page, click the Display Name link to put the connection in Edit mode.

    Image Added


  4. On the edit page for the SAML connection, click the Attributes tab and do the following:.

  5. Select Create a New SAML Attribute Statement and then select Create a SAML Attribute.

    Image Removed


    Image Added


    This opens the SAML Attribute dialog

    , where you enter information for the attribute

    .

    Image Removed
    info


    Image Added

    In this dialog, the following fields are the most important:
    Name (required)

     —

     – The name

    for

    of the attribute

    .


    Display Name

    —

    (required) – The name that appears to users in the EmpowerID

    .

    interface
    Mapped

    Attribute —

    Attribute – Specifies whether the attribute is mapped to the value of an EmpowerID Person or account property.


    If so, the

    attribute

    attribue value stores the mapping formatted as 

    Span
    stylebackground: #f4f2f9; color: #0072be;

    {ComponentName.PropertyName}

    where ComponentName is a

    • Person
    • PersonPrincipal (pared-down version of Person)
    • Account
    • AccountPrincipal (pared-down version of Account)
    and PropertyName is the mapped property on the component, such as EmployeeID

    Attribute Value — Specifies the value of the attribute being passed to the service provider.
    For example, if your attribute is mapped to the EmployeeID of an EmpowerID Person, the value of this field is 

    Span
    stylebackground: #f4f2f9; color: #0072be;

    {Person.EmployeeID}

    .
    Format — The format of the attribute as specified by the service provider. If the service provider has not specified a format, select Unspecified.






    2. Fill in the fields as needed and click Add to close the SAML Attribute dialog.



    3. Back in the main page, click Save.

...