Mapping attributes - PingFederate

Mapping attributes - PingFederate - 10.1

PingFederate Server

bundle

pingfederate-101

ft:publication_title

PingFederate Server

Product_Version_ce

PingFederate 10.1

category

Product

pf-101

pingfederate

ContentType_ce

Mapping attributes determines how attributes from your user store are mapped to the System for Cross-domain Identity Management (SCIM) attributes in the core schema and custom attributes through a schema extension or to the provisioning fields supported for your organization's software as a service (SaaS) customer account.

Edit the mapping of attributes from the local datastore into fields specified by the service provider (SP).

A screen capture of the Attribute Mapping tab configuration.

Important:

If you are provisioning for SCIM, your SP can make one or more optional core attributes mandatory. For more information, see the SCIM documentation from the SP or the SCIM Resource Schema representation.

Tip:

For non-SCIM SaaS connectors, PingFederate automatically retrieves from the vendor the Field Names shown on this tab, but only on the first pass through the configuration flow. If you are using this configuration to modify an existing mapping configuration, click Refresh Fields to synchronize the list with the target if needed.

For each field, the Specify Attribute Mapping option provides a means of adding or modifying the mapping details.

Note:

All required attributes listed in the Field Name column, indicated with asterisks, must be mapped. Click View Partner Field Specifications for a summary of requirements for all fields specified for the target partner.

For some fields, PingFederate preselects LDAP attributes commonly used to store the required values.

Go to Applications > Integration > SP Connections to open the SP Connections configuration window.
To edit an existing SP connection, open an SP connection by clicking on its name in the Connection Name column.
On the Outbound Provisioning tab, click Configure Provisioning to open the Configure Channels configuration window.

Note:
The Outbound Provisioning tab is only visible after you select the Outbound Provisioning check box and from the Type list, select the type on the Connection Type tab.
Go to the Manage Channels tab.
Select a channel.
Go to the Attribute Mapping tab.
To edit a field, click Edit under Action.

Tip:
If you have specified any custom attributes, they are listed at the end of the Attribute Mapping configuration.
On the Attribute Mapping tab, provide mapping details.
Repeat steps for each attribute shown in the Field Name column as needed.

Tip:
For most fields, if you map more than one attribute from your datastore into a single field at the target location, then you must use an OGNL expression to indicate how to combine the attribute values.

The only exception is the LDAP Attributes Map field, which is provided primarily to support SCIM attributes specific to PingOne for Enterprise. This field can contain multiple attributes without using OGNL.
Click Next.