The next step in this configuration is to map values from the IdP adapter into the attributes required by the SP adapter (the Adapter Contract).

Map each attribute to fulfill the Adapter Contract from one of these Sources:

  • Adapter

    When you make this selection, the associated Value drop-down list is populated by the IdP adapter.

  • Context

    Values are returned from the context of the transaction at runtime.


    The HTTP Request selection is retrieved as a Java object rather than text. For this reason, OGNL expressions are more appropriate to evaluate and return values.

    Choose Expression and then click Edit to enter an expression (see Using the OGNL edit screen). (If the Expression selection is not listed, then the feature is not enabled—see Enabling and disabling expressions. For syntax and examples, see sections under Construct OGNL expressions.)

  • LDAP/JDBC/Other (when a datastore is used)

    Values are returned from your datastore (if used). When you make this selection, the Value list is populated by the attributes from the datastore.

  • Expression (when enabled)

    This option provides more complex mapping capabilities—for example, transforming incoming values into different formats (see Attribute mapping expressions). All of the variables available for text entries (see below) are also available for expressions.

  • No Mapping

    Select this option to ignore the Value field, causing no value selection to be necessary.

  • Text

    The value is what you enter. This can be text only, or you can mix text with references to any of the values from the IdP Adapter, using the ${attribute} syntax.

    You can also enter values from your datastore, when applicable, using this syntax:


    where attr-source-id is the Attribute Source ID value (see Choosing a datastore) and attribute is any of the datastore attributes you select.

  1. Select a source of the attribute under Source for each SP Adapter Contract attribute.
  2. Specify an attribute under Value for each attribute.