Question
BitsInGlass
IN
Last activity: 10 Aug 2017 8:59 EDT
SAML Auth Service attributes in acivity pySAMLWebSSOAuthenticationActivity
Hi All,
I want map some attribute like FIRSTName,UserName,etc in SAML Auth Service to pyFirstName,pyUserName properties and use those properties values in operator id creation.
I have also done the code change in pySAMLWebSSOAuthenticationActivity to map SAML response to local variables,but still i am unable to get the response values from SAML.
Can any one suggest , what are the other changes i need to do to make it work.
Regards,
Ramprasad
***Updated by moderator: Lochan to add Categories***
JPMorgan Chase & Company
US
Hi,
In the Processing options section, in the Post processing activity field, enter the name of your post-processing activity. The post-processing activity can connect to any external entity to get additional data, and the activity can enrich the OperatorID page with attributes available on the assertion page
Pegasystems Inc.
IN
Hi Raprasad,
You can put debug on the activity pySAMLWebSSOAuthenticationActivity (logger:Rule_Obj_Activity.pySAMLWebSSOAuthenticationActivity.Code_Security.Action for pySAMLWebSSOAuthenticationActivity) and see the logs: verify the saml response attributes and see if they are mapped properly in authentication service mapping tab.
If you want to create operator, you have to make use of the model user located in the orgunit page.
For that you have to map the attribute values coming from IDP to pega properties.
Using OOTB activity pySAMLWebSSOAuthenticationActivity without customizing, you have to map IDP attribute values for pyorganization, pyOrgDivision, pyOrgUnit and pyUserIdentifier to create an operator in pega.
Hi Raprasad,
You can put debug on the activity pySAMLWebSSOAuthenticationActivity (logger:Rule_Obj_Activity.pySAMLWebSSOAuthenticationActivity.Code_Security.Action for pySAMLWebSSOAuthenticationActivity) and see the logs: verify the saml response attributes and see if they are mapped properly in authentication service mapping tab.
If you want to create operator, you have to make use of the model user located in the orgunit page.
For that you have to map the attribute values coming from IDP to pega properties.
Using OOTB activity pySAMLWebSSOAuthenticationActivity without customizing, you have to map IDP attribute values for pyorganization, pyOrgDivision, pyOrgUnit and pyUserIdentifier to create an operator in pega.
You can also use SAMLTRACER addin in Mozilla browser /samltracer in chrome to check the attributes which are coming from IDP.
Thank you,
Adithya