Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Section
bordertrue


Column

Under SSO>Service Providers locate the SP you wish to add the attribute to.


Click on the Ellipses and select Edit from the drop-down menu that appears


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px




Section
bordertrue


Column

Click on the Attributes tab and then click on Create


Column
width60%



Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px




Section
bordertrue


Column

Add the following parameters:

FieldValue
Location:HTTP Body
Name:This can be any name the SP requires however usually it is 'groups'
Format: attrname-format:URI
Script:groups*.name


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px



Remember to Save the changes

Please Test

Section
bordertrue


Column

Here are the groups that the AD account belongs to..



Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px




Section
bordertrue


Column

If you log onto the SAML website  you can check to see if all the groups of which the AD account is a member of, are returned in the 'groups' attribute, by looking at the full SAML assertion...


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px

 




Section
bordertrue


Column

In this example, this is what the SAML test page returns..


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px