Page created: 29 Jan 2021 |
Page updated: 22 Sep 2021
In the first stage of the OAuth attribute mapping process, PingFederate maps attributes to persistent grant contracts.
You configure PingFederate to use attributes from the following sources:
- authentication policy contracts
- authentication sources, such as IdP adapter instances and IdP connections
- password credential validator instances for resource owner credentials
Depending on the attribute source, use one of the following PingFederate windows to configure the grant contract mapping:
These windows also let you configure issuance criteria to control whether PingFederate fulfills the contract.
Persistent grants, and any associated attributes and their values, remain valid until the grants expire or until PingFederate explicitly revokes them or cleans them up.
For more information about the OAuth attribute mapping process, see Mapping OAuth attributes