An attribute contract is the set of user attributes expected in incoming SAML assertions (see Attribute contracts). You identify these attributes on the Attribute Contract screen.

Optionally, you can mask the values of attributes (other than SAML_SUBJECT) in logs that PingFederate writes when it receives security tokens.

  1. Enter the attribute name in the text box.

    Attribute names are case-sensitive and must correspond to the attribute names expected by the requester.

  2. Optional: Select the check box under Mask Values in Log.
  3. Click Add.
  4. Repeat until all applicable attributes are defined.

Use the Edit, Update, and Cancel workflow to make or undo a change to an item. Use the Delete and Undelete workflow to remove an item or cancel the removal request.