SAML attributes that ScreenSteps accepts for identifying users

Updated on Jul 03, 2023

This table shows which SAML attributes in a SAML assertion map to ScreenSteps user attributes.

When the following attributes are included in the AttributeStatement of the SAML assertion, the corresponding user attributes will be updated in ScreenSteps.

SAML Attribute	ScreenSteps User Attribute
givenName http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname urn:mace:dir:attribute-def:givenName	First Name
sn http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname urn:mace:dir:attribute-def:sn	Last Name
email mail http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress urn:mace:dir:attribute-def:mail	Email
username http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name urn:mace:dir:attribute-def:eduPersonPrincipalName	Login
http://schemas.microsoft.com/identity/claims/objectidentifier	External ID

In addition, for the Email address ScreenSteps will also check the Subject > NameId value if one of the attributes listed above is not present.

SAML Subject	ScreenSteps User Attribute
NameId	Email

0 Comments

Add your comment

Previous Article How to Edit Single Sign-on Settings or Find your Consumer URL and Test URL

Next Article How do I get back into my account if I have accidentally locked myself out?

ScreenSteps

SAML attributes that ScreenSteps accepts for identifying users

0 Comments

Add your comment

Single Sign-on and SCIM

Other Resources

Recently Updated Articles