Summary

This document will guide you through the steps to map user store attributes to SAML attributes in scenarios where PhenixID Authentication Services is acting as a SAML Identity Provider in Skolfederationen.

System Requirements

• PhenixID Authentication Services 2.7 or higher
• PhenixID Authentication Services set up as a SAML Identity Provider in Skolfederationen.

Instruction

Add mapping to the Execution flow

• Login to Configuration Manager
• Navigate to Scenarios->Federation and click on the IdP used for Skolfederationen.
• Select Execution flow.
• Click on the last Execution flow (the one containing AssertionProvider valve(s)).
• Click Add valve
• Select PropertyAddValve
• Set name = SAML Attribute name
• Set value = {{item.<user_store_attribute_fetched_in_previous_valve}}
  Example:

• Click Save
• Move the newly added PropertyAddValve. It should be placed after the user store search valve (for example LDAPSearchValve) but before the AssertionProvider valve(s).

• Follow the instruction above for additional mappings needed. Make sure the mapping (PropertyAddValve) has not been added before. If so, you can reuse that mapping.
• Please be aware that the user store attribute (ie item.X) may be named differently in your environment based on user store types etc.

Mapping table

NB! If you can’t find the data needed or are in need of advanced configuration assistance, such as SQL user store lookup or a mixed user store lookup (multiple LDAP stores, LDAP and SQL or equivalent), please contact PhenixID for assistance. PhenixID has tools to fetch data from LDAP, SQL, web services, api:s.