Previous Topic: Construct Attribute Mapping Rules Using the Proper SyntaxNext Topic: Dynamic Provisioning of a User Identity at the Relying Party


Configure Attribute Mapping at the Relying Party

Define a set of mapping rules that CA SiteMinder® Federation Standalone can apply to the assertion attributes. CA SiteMinder® Federation Standalone lets you map a specific assertion attribute or a combination of several attributes. The result of the mapping can be a single application attribute or multiple attributes.

To configure attribute mapping

  1. Navigate to the Application Integration step in the Partnership wizard.
  2. Select the Enable Attribute Mapping check box in the Map to Application Attribute section.

    An Application Attribute Definitions table displays.

  3. Modify any existing application attribute or define new ones in the table. All application attributes are delivered to the target application.

    The syntax of the value in the Assertion Attribute column must comply with Unified Expression Language (UEL).

    Select the slider button (<<) to open the expression builder and display the options available to you. To add the item from the list to the attribute value, select the assertion or special character and click Append.

    Note: When you specify Cookie Data and any special character in the Application Attributes Table, select the URL Encode Attribute Cookie Data option. The check box is in the Target Application section of the dialog. Special characters can be added from the drop-down list or entered manually. Additionally, the target application must URL decodes the name and value of the application attribute received.

  4. (Optional) If the default mappings are not sufficient, add as many rows as you like.

    By default, all assertion attributes defined at the remote Producer or IdP entity are included in the table with default (straight) mappings. The original assertion attribute is not changed. You can modify these mappings.

  5. Configure the method by which the application attributes are sent to the target application. You configure the method in the Target Application section of the Application Integration dialog.

Attribute mapping configuration is complete.

More information:

Construct Attribute Mapping Rules Using the Proper Syntax