Use a Custom Attribute map for SAML Configuration¶
Customer Managed Applies to customer-managed instances of Alation
If your IdP does not offer a way for you to map the assertion response attributes onto attributes expected by Alation, you can create a custom attribute map on the Alation server and map the attributes using this map. The map uses the format Basic.
To create the custom attribute map:
On the Alation server, create a file map.py at /opt/alation/site/saml/
The file should have the following content. Substitute the keys 'ssoid'
, 'email'
, 'firstname'
, 'lastname'
with your actual attribute names):
MAP = {
'identifier':'urn:oasis:names:tc:SAML:2.0:attrname-format:basic',
'to': {},
'fro': {
'ssoid': 'uid',
'email': 'mail',
'firstname': 'givenName',
'lastname': 'sn'
}
}