Federation Security Services Guide › Authorize Users with Attributes from an Assertion Query › Set up the Attribute Authority › Configure Attributes at the Attribute Authority

Configure Attributes at the Attribute Authority

When you configure an attribute, you indicate whether the attribute is used as part of a single sign-on request, or to satisfy an attribute query request. The Retrieval Method field in the SAML Service Provider Attribute dialog determines the attributes function.

To use the same attribute for both services, create two attribute statements that use the same Attribute name and variable; however, one attribute uses SSO as the retrieval method and one uses Attribute Services as the retrieval method.

To configure an attribute

1. Configure Attributes for SSO Assertions.

   The configuration process for configuring attributes at the Attribute Authority are the same for configuring attributes for single sign-on assertions.

2. Select Attribute Service for the Retrieval Method field in the SAML Service Provider Attribute dialog.

   If an attribute query requests this attribute, selecting Attribute Service as the Retrieval Method marks the attribute for inclusion in the attribute assertion.