<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00009hKhdrSACOkta Classic EngineSingle Sign-OnAnswered2024-03-25T20:32:37.000Z2020-10-13T10:03:47.000Z2020-10-20T12:16:17.000Z

1tju4 (1tju4) asked a question.

Copying SAML attributes from request to assertion

Does OKTA provide a way of copying attributes from with the SAML request into the SAML assertion ? I can see ways of copying data from the OKTA profile but not the request ? A pointer to some documentation would be useful.


  • User15730827307777599440 (Vendor Management)

    Thank you for posting in our community! My name is Gabriel and I'm from Okta support.

     

    If I understood correctly, copying attributes contained in the SAML request coming from the Service Provider into the SAML response sent by Okta is not possible. As per our documentation:

     

    • A SAML Request, also known as an authentication request, is generated by the Service Provider to "request" an authentication.
    • A SAML Response is generated by the Identity Provider. It contains the actual assertion of the authenticated user. In addition, a SAML Response may contain additional information, such as user profile information and group/role information, depending on what the Service Provider can support.
    • The Service Provider doesn't know who the user is until the SAML assertion comes back from the Identity Provider.

     

    So, when a SAML request is sent to Okta, the SP does not know which user is requesting an authentication, until Okta sends the SAML assertion back to the SP. Because of this, Okta does not need a way of automatically processing any user or group attributes contained in the request and copying them into the assertion.

     

    Indeed, you can define SAML attribute statements. You can read more about this subject here. If you need more details or need additional details do not hesitate to open a support case with us!

    Expand Post
This question is closed.
Loading
Copying SAML attributes from request to assertion