Federation Security Services Guide › Identify Service Providers for a SAML 2.0 Identity Provider › Configure Attributes for Inclusion in Assertions (optional) › Attributes that Function for SSO and Attribute Query Requests

Attributes that Function for SSO and Attribute Query Requests

When you configure an attribute, you indicate whether the attribute is used as part of a single sign-on request, or to satisfy an attribute query request. The attributes function is determined by the Retrieval Method field in the SAML Service Provider Attribute dialog.

If you want the same attribute to be used for both services, you must create two attribute statements that use the same Attribute name and variable; however, one attribute uses SSO as the retrieval method and one uses Attribute Services as the retrieval method.