PingOne will automatically populate required SAML attributes.

For Concur, the required attribute is SAML_SUBJECT.

Enabling user provisioning creates additional required attributes, which are designated with asterisks (*). We recommend literal mapping for these attributes.

Note:

The EmpID attribute is unique to Concur and is required to complete user provisioning for this application. It is mapped to Email by default, but we recommend changing it.

Click Advanced, and from the Function list, select PickByFieldsFromJsonList. In the Expression field, enter {"primary":true,"type":"work","targetField":"employeeID"}

  1. To add an additional optional attribute, click Add new attribute.
  2. In the Application Attribute field, enter the attribute name as it appears in the application.
  3. In the Identity Bridge Attribute or Literal Value field, choose one of the following:
    • To map to the application attribute: Enter or select a directory attribute.
    • To assign to the application attribute: Select As Literal, then enter a literal value.
  4. To create advanced attribute mappings, click Advanced.

    For more information, see Create advanced attribute mappings.

Click Continue to Next Step.