Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

If you set your IDP as above, then inside our application: your SAM-Account-Name will get mapped to our User Login field, your E-Mail-Adresses will get mapped to our Email and your Display-Name will get mapped to our Person Name fields respectively.

Important point here to remember is that, as per above example, your Outgoing Claim Types must have at least Claims:Name ID - this gets mapped to our User Login and E-Mail Address - this gets get mapped to our User Login and Email fields respectively. The 3rd one should be Given name - this Outgoing Claim: Given Name - gets mapped to our Person Name field.

In absence of the 2nd and the 3rd Outgoing Claims: E-Mail Address and Given Name as per above example, Name ID gets mapped to both of Person Name and User Login fields at our end. But Email fields at our end will be left blank.

In absence of just the 3rd Outgoing Claim: Given Name as per above example, Name ID gets mapped to both Person Name and User Login fields at our end. And the E-Mail Address gets mapped to our Email field.

In this example, the Name ID is what uniquely identifies the SSO user in the system.

Sending the Outgoing Claim: Name ID is required.

You choose what your LDAP Attributes you want to map against those Outgoing Claim Types.

The metadata.xml from the Chemwatch side that will be used to configure your IDP looks like the following:

...