BillS.23320 (Customer) asked a question.
Passing SAML custom attributes from Incoming assertion to outgoing assertion
We are in the process of replacing our home grown SAML processor with Okta. It currently is only IDP initiated flow. What we plan to do is have the SAML assertion from the client go to Okta. It is then redirected to an Okta SAML Application which will redirect to our site. We have that part figured out.
The client had the ability to send some bits of data using custom SAML attributes. Is there a way to forward those attributes from the incoming SAML assertion into Okta to the outgoing assertion from Okta to our app?
Thank you.
Hello @BillS.23320 (Customer) Thank you for reacting out to our Community!
This should be possible, but the IDP setup needs to done as a Profile master and the attributes need to be mapped from the IDP into the user profile, then you can add additional attributes to the SAML application to be passed along.
Please see our docs below:
https://support.okta.com/help/s/article/Mappings-for-IdP-to-Okta-do-not-Have-Option-for-Create-and-Update?language=en_US
https://help.okta.com/en-us/content/topics/security/idp-config-ud-mappings.htm
https://support.okta.com/help/s/article/How-to-define-and-configure-a-custom-SAML-attribute-statement?language=en_US
Community members help others by clicking Like or Select as Best on responses. Try it today.
Follow us at OktaSupport