SAML setup assertion with custom parameters

0
votes

I have working SAML 2.0 in my dev account https://espatialzdenek-dev.onelogin.com

I am able to login through onelogin.

Only problem I have is that I can't change / I don't know how to change attribute names in the login request from IDP to SP.

in the assertion saml response I get in section 

<saml:AttributeStatement>

for example this element

<saml:AttributeStatement>
     <saml:Attribute Name="User.FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">z2</saml:AttributeValue>
     </saml:Attribute>

but I need there 

<saml:AttributeStatement>
     <saml:Attribute Name="firstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">z2</saml:AttributeValue>
     </saml:Attribute>

I need make this change at least for first name , last name and user assigned security groups.

Is there way to do this in oneLogin SAML IDP setup?

1
onelogin

1 Answers

0
votes

Add App -> SAML Test.....

That will give you a custom application with all options available to you. Create custom claims to your hearts content.