Page created: 17 Jun 2020
|
Page updated: 17 Jun 2020
| 1 min read
Product PingFederate Bridge 10.1 Content Type Product documentation Deployment Method Software Audience Administrator Multi-factor authentication (MFA) Capability Single Sign-on (SSO) User task Administration Configuration
Set pseudonym and masking options to uniquely identify a user to your PingFederate Bridge SP partners.
- Go to Authentication > Integration > IdP Adapters and click the IdP adapter instance that you want to change.
-
On the Adapter Attributes tab, configure the pseudonym and
masking options.
Note:
The Override Attributes check box in this window reflects the status of the override option in the Extended Contract tab.
-
Select the check box under Pseudonym for the user
identifier of the adapter and optionally for the other attributes, if
available.
This selection is used if any of your service provider (SP) partners use pseudonyms for account linking.Note:
A selection is required whether or not you use pseudonyms for account linking. This allows account linking to be used later without having to delete and reconfigure the adapter. Ensure that you choose at least one attribute that is unique for each user, such as a user's email, to prevent assigning the same pseudonym to multiple users.
- Select the check box under Mask Log Values for any attributes that you want PingFederate to mask their values in its logs at runtime.
- Select the Mask all OGNL-expression generated log values check box, if OGNL expressions might be used to map derived values into outgoing assertions and you want those values masked.
-
Select the check box under Pseudonym for the user
identifier of the adapter and optionally for the other attributes, if
available.