owtm9 (owtm9) asked a question.
Customize SAML attributes before putting in assertion
Hello, I am looking to see if anyone has done any customization of attributes before adding to the saml assertion? Currently, Okta supports regex for group filtering but not for data manipulation during a saml flow.
What I am trying to accomplish is similar to the "AWS Account Federation" app in the Okta Integration Network where the groups can be reformatted into the "ARN" format.
We do not want to use apps in the Okta Integration Network when possible as we do not have any control over changes and or support.
Any feedback is greatly appreciated.
Hi @owtm9 (owtm9) , Thank you for reaching out to the Okta Community!
This is not currently supported by the custom SAML app template. It only supports name format and filter options for Group information being passed to the downstream app.
You can suggest a Feature Enhancement on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented.
More details here:
https://support.okta.com/help/s/blog/a674z000001cj7YAAQ/okta-ideas-faq
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Community members help others by clicking Like or Select as Best on responses. Try it today.
Hi Mihai, sorry I was not clear in my description. I understand the customization I am looking for is not available out of the box. I am looking to see what others have done (inline hooks, custom app etc...) The application in the Okta Integration Network "AWS Account Federation" has the features I need. It would be nice to know how it was created so maybe it can be duplicated where I can have control over the code. I tried creating a developer account and doing an app integration but it just give the default SAML template. I would like to know how to extend the SAML template and add custom features like what was done is AWS Account Federation in the OIN. thanks.
Typically, application vendors would submit the app via the OIN manager page and work with our Application Integration Team to adjust it in accordance with particular requirements, but seeing as you are trying to make a generic template, I don't think this would fall under the same process. Maybe a private app type solution could be implemented.
I recommend discussing this with your Okta Customer Success Manager or Account Executive.
That being said, we'll leave this question open for Community input, in case someone else implemented this kind of solution.