---
title: Mapping an HTML form adapter instance
description: Complete the following to map an HTML form adapter instance.
component: azure
page_id: azure:azure_ad_and_office_365_integration_guide:pf_azuread_office365_integration_mapping_an_html_form_adapter_instance
canonical_url: https://docs.pingidentity.com/integrations/azure/azure_ad_and_office_365_integration_guide/pf_azuread_office365_integration_mapping_an_html_form_adapter_instance.html
llms_txt: https://docs.pingidentity.com/integrations/azure/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: June 21, 2024
section_ids:
  steps: Steps
---

# Mapping an HTML form adapter instance

Complete the following to map an HTML form adapter instance.

## Steps

1. On the **Authentication Source Mapping** tab, click **Map New Adapter Instance**.

2. On the **Adapter instance** tab, in the **Adapter Instance** list, select the HTML Form Adapter instance that you created in [Configuring an IdP adapter](pf_azuread_office365_integration_create_an_idp_adapter.html). Click **Next**.

3. On the **Virtual Server IDs** tab, if you have a single domain, click **Next**.

4. If you configured virtual server IDs on the **General Info** tab of the connection and have a separate HTML Form Adapter instances for each subdomain:

   1. Select the **Restrict Virtual Server IDs** checkbox.

   2. Select the checkbox for the virtual server ID that represents the subdomain associated with this HTML Form Adapter instance.

   3. Click **Next**.

5. If you configured virtual server IDs on the **General Info** tab of the connection and use a single HTML Form Adapter instances for all subdomains:

   1. Leave the **Restrict Virtual Server IDs** checkbox unselected. Click **Next**.

   2. (Recommended) When you reach the **Issuance Criteria** tab later in the setup process, create an OGNL expression to protect against unauthorized access.

6. On the **Mapping Method** tab, select **Retrieve additional attributes from multiple data stores using one mapping**. Click **Next**.

7. On the **Attribute Sources & User Lookup** tab, complete the steps in [Configuring attribute source and user lookup for HTML Form Adapter instances](pf_azuread_office365_integration_configuring_attribute_source_and_user_lookup_for_html_form_adapter_instances.html), and then click **Next**.

8. On the **Attribute Contract Fulfillment** tab, create the following mappings and then click **Next**.

   | Attribute Contract | Source                         | Value                                                   |
   | ------------------ | ------------------------------ | ------------------------------------------------------- |
   | `ImmutableID`      | **LDAP (*\<Your datastore>*)** | **objectGUID**                                          |
   | `SAML_SUBJECT`     | **LDAP (*\<Your datastore>*)** | **objectGUID**                                          |
   | `UPN`              | **LDAP (*\<Your datastore>*)** | **userPrincipalName**                                   |
   | `SAML_NAME_FORMAT` | **Text**                       | `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` |

9. If you use a single HTML Form Adapter instance for users in multiple subdomains, on the **Issuance Criteria** tab, create an OGNL expression verify the virtual server ID and other conditions, such as group membership.

   |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
   | - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | Learn more about OGNL expressions in [Defining issuance criteria for IdP Browser SSO](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_defining_issuance_criteria_idp_browser_sso.html), [Enabling and disabling expressions](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_enable_disable_express.html), and [Constructing OGNL expressions](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_construct_ognl_express.html) in the PingFederate documentation. |

10. Click **Next**

11. On the **Summary** tab, click **Done**.