Skip to main content
Kkkrish
Level 4
Apr 12, 2016 8:17 AM UTC
Solved

what is the use of "UserID Attribute" in the SAML configuration?

What is the use of "UserID Attribute" in the SAML configuration. what it does exactly? can any one explains how it works with any use case.?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
SDharmaraj
SDharmarajAccepted solution
Level 2
Apr 12, 2016 4:07 PM UTC

kk krish wrote...

What is the use of "UserID Attribute" in the SAML configuration. what it does exactly? can any one explains how it works with any use case.?

 

Its the ID attribute your AEM instance is looking in the SAML response after authentication from IDP Server. Sample SAML Response from IDP after decryption will look like below

    <AttributeStatement>
            <Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
                <AttributeValue>aparker@geometrixx.info</AttributeValue>
            </Attribute>
        </AttributeStatement>

AEM will get the attribute value after it matched the ID (i,e in this case uid) and login to instance. You have to map this ID with the ID that IDP is sending. Check this SAML demo page. Attribute-filter section.

https://helpx.adobe.com/experience-manager/kb/saml-demo.html 

View in thread

3 replies

SDharmaraj
SDharmarajAccepted solution
Level 2
Apr 12, 2016 4:07 PM UTC

kk krish wrote...

What is the use of "UserID Attribute" in the SAML configuration. what it does exactly? can any one explains how it works with any use case.?

 

Its the ID attribute your AEM instance is looking in the SAML response after authentication from IDP Server. Sample SAML Response from IDP after decryption will look like below

    <AttributeStatement>
            <Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
                <AttributeValue>aparker@geometrixx.info</AttributeValue>
            </Attribute>
        </AttributeStatement>

AEM will get the attribute value after it matched the ID (i,e in this case uid) and login to instance. You have to map this ID with the ID that IDP is sending. Check this SAML demo page. Attribute-filter section.

https://helpx.adobe.com/experience-manager/kb/saml-demo.html 

Translate
Lokesh_Shivalingaiah
Lokesh_Shivalingaiah
Level 10
Apr 12, 2016 7:17 PM UTC

Basically, a property or an attribute name which holds the user name/id at SAML is what you have to mention.

Translate
kautuk_sahni
kautuk_sahni
Level 9
Apr 13, 2016 7:04 AM UTC

Hi

Adding some reference for you:-

Link:- adobeaemclub.com/setting-saml-authentication/

// UserID Attribute (optional) –   This is useful if you would enable autoCreateUser. The exact value of this can be obtained from your IdP or can be looked at the SAML Response

For more information please look at his article.

 

Thanks and Regards

Kautuk Sahni

Translate
Kautuk Sahni
Terms & ConditionsAccessibility statement

Loading footer...