<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00008j8uFnSAIOkta Classic EngineAdministrationAnswered2024-04-15T09:21:55.000Z2020-06-19T15:26:08.000Z2020-06-25T12:03:35.000Z

5cjpl (5cjpl) asked a question.

Multivalued attributes - SAML Assertion

I have created a custom attribute with "String Array" as data type and setting this attribute on Attribute statement to pass to SAML assertion.

 

But the output format in SAML assertion is coming as test1,test2 not in separate line like below:

<saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:type="xs:string"

>test1</saml2:AttributeValue>

<saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:type="xs:string"

>test2</saml2:AttributeValue>

 

Can someone help me in achieving this.


  • 1fj3q (1fj3q)

    We are using the function in OIN application mapping for user provisioning. Haven't tried to use the function in the SAML attribute page. Another way to accomplish the desired result in case SAML app don't support the function in attribute is to create an Okta attribute and use function flatten the string array and use this new attribute in the SAML app attribute page but I'm not sure if in your org accounts are mastered by AD or Okta.

    Expand Post
    Selected as Best
  • BhaskarM.18336 (Customer)

    seems , string array shows the data in inline :value1,value2

    unless you try by create string

  • 1fj3q (1fj3q)

    If you want the Okta String array to be passed as CSV then you can use the Arrays.toCsvString(string array).

  • 5cjpl (5cjpl)

    Thanks Bhaskar & Sandeep for your response. I tried with Arrays.toCSV string function but no luck. I also tried Arrays.Flatten and other functions but not getting the result as above.

     

    Thank you.

  • 1fj3q (1fj3q)

    We are using the function in OIN application mapping for user provisioning. Haven't tried to use the function in the SAML attribute page. Another way to accomplish the desired result in case SAML app don't support the function in attribute is to create an Okta attribute and use function flatten the string array and use this new attribute in the SAML app attribute page but I'm not sure if in your org accounts are mastered by AD or Okta.

    Expand Post
    Selected as Best
  • 5cjpl (5cjpl)

    I think it works for OIN app but this is custom SAML app with custom attribute. I created this custom attribute only for this application users with attribute type as "Group" so i can assign the value at group level and i dont want this attribute to be visible on OKTA profile.

     

    I think there is some feature which needs to be activated at Org level to get the SAML response in this format.

     

    Thank you!!

    Expand Post
This question is closed.
Loading
Multivalued attributes - SAML Assertion