---
title: Selecting an attribute retrieval method for token generation
description: You can fulfill the token generator contract by using only the attributes from the incoming SAML token or by using these attributes to look up additional information from a local data store.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_wstrusttokengeneratormappingtasklet_wstrustselecttokengeneratordatasourcestate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_wstrusttokengeneratormappingtasklet_wstrustselecttokengeneratordatasourcestate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  about-this-task: About this task
  steps: Steps
  result: Result:
  choose-from: Choose from:
---

# Selecting an attribute retrieval method for token generation

You can fulfill the token generator contract by using only the attributes from the incoming SAML token or by using these attributes to look up additional information from a local data store.

## About this task

For token generation, you can query local data stores to help fulfill the token generator contract, in conjunction with attribute values supplied by the incoming token.

The values supplied by the token are shown in the **Attribute Contract** section on the **Attribute Retrieval** tab.

## Steps

1. On the **Token Generator Mapping & User Lookup** tab, click **Map New Token Generator Instance**.

   ### Result:

   The **Token Generator Mapping & User Lookup** configuration window opens.

2. On the **Attribute Retrieval** tab, select how you want to fulfill the token generator contract for an instance.

   ### Choose from:

   * If the incoming SAML token contains all the attributes that your application requires, select **Use only the attributes available in the incoming token**.

   * To set up a data store query, select **Use the incoming token to look up additional information** and then follow a series of sub tasks to complete the configuration.

     For step-by-step instructions, see [Choosing a datastore](pf_choosing_datastore.html).

   |   |                                                                                                                                                                              |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | If you are editing a currently mapped token generator instance, you can change the mapping method, which might require additional configuration changes in subsequent tasks. |