Defining an attribute contract for SP STS
An attribute contract is the set of user attributes expected in incoming SAML assertions. For more information, see Attribute contracts.
About this task
On the Attribute Contract tab, identify the user attributes.
Optionally, you can mask the values of attributes, other than SAML_SUBJECT, in logs that PingFederate writes when it receives security tokens.
|
Use the Edit, Update, and Cancel workflows to make or undo a change to an item. Use the Delete and Undelete workflows to remove an item or cancel the removal request. |
Steps
-
Go to Authentication → Integration → IdP Connections.
-
On the WS-Trust STS tab, click Configure WS-Trust STS.
-
On the Token Generation tab, click Configure Token Generation.
Result:
The Token Generation configuration window opens.
-
Click the Attribute Contract tab.
-
Enter the name in the Extend the Contract field.
Attribute names are case-sensitive and must correspond to the attribute names expected by the requester.
-
Optional: Select the Mask Values in Log check box .
-
Click Add.
-
Repeat until all applicable attributes are defined.
-
Click Next.