For token generation, you can query local data stores to help fulfill the token generator contract, in conjunction with attribute values supplied by the incoming token.

The values supplied by the token are shown under Attribute Contract on the Attribute Retrieval screen.

  • If the incoming SAML token contains all the attributes that your application requires, select Use only the attributes available in the incoming token.
  • To set up a datastore query, select Use the incoming token to look up additional information and then follow a series of sub tasks to complete the configuration.

    For step-by-step instructions, see Choosing a datastore.

If you are editing a currently mapped token generator instance, you can change the mapping method, which may require additional configuration changes in subsequent tasks.