Question
Accenture
IN
Last activity: 24 Mar 2017 4:40 EDT
Can pega retrieve a new xml attribute in the SAML response and parse it?
Hello,
My IdP is going to send an extra xml tag in the SAML response. Can pega parse this extra tag from response?
Theoretically, believe pega can do it. Pega can read he the new attribute added in <saml:AttributeStatement>.
Its about extending the "Assertion" parse xml rule in Data-SAMLAssertion-AssertionType. class. And modifying pyLoadSAMLAssertion activity to store this new attribute.
Will there be any challenges out there or any suggestions?
***Updated by Moderator: Lochan. Removed user added Ask the Expert tag. Apologies for confusion, shouldn't have been an end-user option***
Accepted Solution
Accenture
IN
An update to close the loop.
Yes, a custom SAML attribute can be accepted in the SAML token. "Assertion" Parse XML is an available rule and can be extended to support such requirement.
In our case, the primary "active directory id" was not part of SAML Attributes (depends on the IdP). So, we had to depend on "SUBJECT" of SAML token.
Pegasystems Inc.
US
If you're on 7.1.7 and you're using "unbounded complex element", you'll need a hfix. Otherwise, you look good to go. Below article has this research and a useful debugging approach.
Accepted Solution
Accenture
IN
An update to close the loop.
Yes, a custom SAML attribute can be accepted in the SAML token. "Assertion" Parse XML is an available rule and can be extended to support such requirement.
In our case, the primary "active directory id" was not part of SAML Attributes (depends on the IdP). So, we had to depend on "SUBJECT" of SAML token.