Define and Configure a Custom SAML Attribute Statement in Okta
Last Updated:
Overview
Administrators define custom attribute statements when creating a new Secure Assertion Markup Language (SAML) integration or modifying an existing one in Okta. Okta inserts these statements into the SAML assertions shared with the application. Configure these attributes by identifying the variable name in the Okta profile and adding it as an expression in the application settings.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Secure Assertion Markup Language (SAML)
- Application Integration Wizard (AIW)
- Single Sign-On (SSO)
Solution
To define and configure a custom SAML attribute for a SAML app integration, watch the video or follow the steps below:
- Log in to the Okta Admin Dashboard. On the left panel, go to Directory > Profile Editor.
- Identify the Variable Name of the user attribute required to add by looking at the User (default) profile.
- This example uses the Okta Profile attribute
title. Note the Variable Name of the attribute. This will be referenced later. The user will have theOkta Support Engineertitle already defined in their Okta User Profile:
- Navigate to the Applications tab and select the desired SAML application for adding the custom attribute.
- On the Sign On tab, scroll down to the Attribute Statements section.
- Select Add expression.
- In the Name field, enter the name of the desired SAML attribute, such as
Title. - In the Expression field, enter the Variable Name from the Okta profile, prefixed with
user.profile(such asuser.profile.title). - Click Save.
- Verify these assignments with a SAML tracer.
