Identifying expected group attributes for the SCIM response
On the Attribute Contract tab, you can identify the group attributes for you and your partner.
About this task
An attribute contract is a set of group attributes that you and your partner have agreed will be sent in a System for Cross-domain Identity Management (SCIM) response for this connection. The attributes you mapped to group attributes on the Write Groupstab appear at the top of the tab.
Click Available SCIM Attributes near the lower-left corner of the tab to include additional attributes you want to map in the SCIM response.
Optionally, you can mask the values of attributes in the log files that PingFederate writes when it sends the SCIM response.
There are several SCIM attributes that are managed internally by PingFederate and are unavailable for inclusion in the attribute contract:
-
id -
members
Steps
-
To add an attribute, enter the attribute name in the text box, select the check box under Mask Values in Log as needed, and click Add.
Attribute names are case-sensitive and must correspond to the attribute names expected by your partner. To see a list of available attributes, click Available SCIM attributes.
Choice Action Modify an attribute name or masking selection
Click Edit under Action for the attribute, make the change, then click Update.
+
If you change your mind, ensure that you click Cancel under Actions and not the Cancel button, which discards any other changes you might have made in the configuration steps.
Delete an attribute
Click Delete under Action for the attribute.