On the Identity Mapping screen, you choose the type of name identifier (Name ID) your partner requires. Your selection may affect the way that the SP looks up and associates your users at the SP site. You and the SP should decide in advance which option to use.

The choices of name-identifier types depend on which protocol you are using, namely SAML or WS-Federation.

  • Refer to subsequent topics for configuration steps.

    Note that the Identity Mapping screen is not applicable to connections using the WS-Federation protocol in conjunction with JWT-based SSO tokens. Instead, work with the SP to define an attribute contract that it can use to map users to accounts at the SP site.