8.1.3 Customizing LDAP Attributes in the SAML Assertion

In SAML integration, Advanced Authentication acts as the identity provider. You can customize the LDAP attributes that are fetched from LDAP repository and displayed in the SAML response that is sent to the service provider.

  1. Click Repositories and edit the preferred LDAP repository.

    For example, eDirectory repository.

  2. Click Advanced Settings and perform the following:

    1. Click Add against Custom attributes to fetch and specify the attribute name that must be retrieved from the repository.

    2. Click Add against Custom attributes to return and specify the attribute name that gets displayed in the SAML assertion.

      For example, assume you want to fetch the creatorsName from repository and send it as creatorsName in SAML assertion. In this case, you need to add creatorsName in Custom attributes to fetch and Custom attributes to return.

  3. Click Save.

  4. Click Events and select the SAML 2 event for which you want to customize LDAP attributes.

  5. Specify Attribute Maps. One Map per line in the below format:

    localName="<local name>" samlName="<Service Provider name>"

    For example, localName="creatorsName" samlName="creators_name"

    The service provider identifies the "creators_name" instead of "creatorsName" from the Identity Provider.