Identity provider attributes

You can map user attributes from an external identity provider (IdP) to PingOne user attributes using the appropriate notation for SAML and JSON.

When mapping user attributes, use the providerAttributes prefix rather than samlAssertion as follows:

providerAttributes.<IdP attribute name>

For example, mapping the email attribute from Facebook to PingOne would look like this:

providerAttributes.email

For external IdPs that pass attributes in JSON structure (all external providers except SAML), the syntax for mapping attributes that use JSON dot notation, such as name.family, must use square brackets and single quotes around the attribute name as follows:

providerAttributes['name.family']