Federation Security Services Guide › Authenticate SAML 2.0 Users at the Service Provider › Configure Single Sign-on at the SP › Permit the Creation of a Name Identifier for SSO › Include an Allow/Create Attribute in Authentication Requests

Include an Allow/Create Attribute in Authentication Requests

To include the Allow/Create attribute in an AuthnRequest message

1. Log in to the Policy Server.
2. Access the appropriate SAML 2.0 authentication scheme or create a new scheme.
3. From the Authentication Scheme Properties dialog box, click Additional Configuration.

   The SAML 2.0 Auth Scheme Properties dialog box opens.

4. Select the SSO tab.
5. Check the Allow IDP to Create New Identifier check box.
6. Click OK.