what is the use of "UserID Attribute" in the SAML configuration?

[Kkkrish]

What is the use of "UserID Attribute" in the SAML configuration. what it does exactly? can any one explains how it works with any use case.?

[SDharmaraj · Accepted solution]

kk krish wrote...

What is the use of "UserID Attribute" in the SAML configuration. what it does exactly? can any one explains how it works with any use case.?

Its the ID attribute your AEM instance is looking in the SAML response after authentication from IDP Server. Sample SAML Response from IDP after decryption will look like below

    <AttributeStatement>
            <Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
                <AttributeValue>aparker@geometrixx.info</AttributeValue>
            </Attribute>
        </AttributeStatement>

AEM will get the attribute value after it matched the ID (i,e in this case uid) and login to instance. You have to map this ID with the ID that IDP is sending. Check this SAML demo page. Attribute-filter section.

https://helpx.adobe.com/experience-manager/kb/saml-demo.html 

[Lokesh_Shivalingaiah]

Basically, a property or an attribute name which holds the user name/id at SAML is what you have to mention.

[kautuk_sahni]

Hi

Adding some reference for you:-

Link:- adobeaemclub.com/setting-saml-authentication/

// UserID Attribute (optional) –   This is useful if you would enable autoCreateUser. The exact value of this can be obtained from your IdP or can be looked at the SAML Response

For more information please look at his article.

Thanks and Regards

Kautuk Sahni