SatyendraS.20196 (Customer) asked a question.
How to send any other attribute in SAML assertion and use it for authentication and authorization
Hello Experts,
This may be a very trivial question for many, as I am starting.
I have integrated an application with Okta (saml based) and IDP and SP initiated transactions are working fine with okta username being passed in assertion and being used on other side as well.
However , now I have scenario, where I need to change the attribute being passed in assertion and use the same on other side as well.
when I look into configuration on Okta side, I don't see any option of using other attribute in place of username.
Could you please guide me where and how to send different attribute and use it as SAML subject?
Thank you
Well... it depends. If your app integration was created by using one of the pre-built templates in the Okta Integration Network, you're probably out of luck because most, if not all, of those templates do not include the ability to add more attributes to the SAML assertion. But, if you created the SAML integration yourself by clicking the Create New App button, then you should be able to add more attributes. On the General tab, click the Edit button in the SAML Settings box, then scroll down to find the Attribute Statements area, and there you go. More info is available here: https://help.okta.com/en/prod/Content/Topics/Apps/Apps_App_Integration_Wizard.htm#SAMLConfigureSAML