For token creation, you can query local datastores to help fulfill the attribute contract, in conjunction with attribute values supplied by the token processor you are using with PingFederate.

The values supplied by the token processor are shown under Token Processor Contract on the Attribute Retrieval screen.

To determine whether you need to look up additional values, compare the attribute contract against the token processor contract (or the request contract if configured). If the attribute contract requires more information, determine whether local datastores can supply it.

  • Select the Retrieve additional attributes from data stores ... option if you want to configure one or more datastores to look up attribute for a single mapping.
  • Select the Use only the Token Processor Contract values ... option if you do not require datastore query.

If you are editing a currently mapped token processor instance, you can change the mapping method, which may require additional configuration changes in subsequent tasks.