<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content

Define and Configure a Custom SAML Attribute Statement in Okta

Single Sign-On
Okta Classic Engine
Okta Identity Engine

Overview

Administrators define custom attribute statements when creating a new Secure Assertion Markup Language (SAML) integration or modifying an existing one in Okta. Okta inserts these statements into the SAML assertions shared with the application. Configure these attributes by identifying the variable name in the Okta profile and adding it as an expression in the application settings.

Applies To

  • Okta Identity Engine (OIE)
  • Okta Classic Engine
  • Secure Assertion Markup Language (SAML)
  • Application Integration Wizard (AIW)
  • Single Sign-On (SSO)

Solution

To define and configure a custom SAML attribute for a SAML app integration, watch the video or follow the steps below:

 

  1. Log in to the Okta Admin Dashboard. On the left panel, go to Directory > Profile Editor.
  2. Identify the Variable Name of the user attribute required to add by looking at the User (default) profile.
  3. This example uses the Okta Profile attribute title. Note the Variable Name of the attribute. This will be referenced later. The user will have the Okta Support Engineer title already defined in their Okta User Profile:

Attribute

Attribute 

  1. Navigate to the Applications tab and select the desired SAML application for adding the custom attribute.
  2. On the Sign On tab, scroll down to the Attribute Statements section.
  3. Select Add expression.

Add Expression

  1. In the Name field, enter the name of the desired SAML attribute, such as Title.
  2. In the Expression field, enter the Variable Name from the Okta profile, prefixed with user.profile (such as user.profile.title).
  3. Click Save.

Attribute

  1. Verify these assignments with a SAML tracer.

Attribute


Related References 

Loading
Okta Support - Define and Configure a Custom SAML Attribute Statement in Okta