Federation › Federation Security Services Guide › Authenticate SAML 1.x Users at a Consumer › Configure SAML 1.x User Disambiguation › Obtain the LoginID

Obtain the LoginID

You can find the LoginID in two ways:

• Relying on the default behavior, where the LoginID is extracted from the NameID in the assertion. This option requires no configuration.
• Using an Xpath query to find the LoginID in place of the default behavior.

To use an Xpath query to determine the LoginID

1. Navigate to the Scheme Setup tab for SAML 1.x artifact or POST authentication template.
2. In the Search Data XPATH field, enter an Xpath query. This query enables the authentication scheme to obtain a LoginID.

   Note: Click Help for a description of fields, controls, and their respective requirements.

   Xpath queries should not contain namespace prefixes. The following is an invalid Xpath query:

   /saml:Response/saml:Assertion/saml:AuthenticationStatement/
   saml:Subject/saml:NameIdentifier/text()
   

   The valid Xpath query is:

   //Response/Assertion/AuthenticationStatement/Subject/
   NameIdentifier/text()
   

3. Click OK to save your configuration changes.