Identity Center Attribute Mapping

Question

Hello, I have created a user within Identity Center and using SAML with my customer application to login.

Everything works as desired but I am just wondering if there is a way to use the "User type" that is assigned to the user in the User page at creation.

For example, if I created a user with a User Type "Admin", how do I map this attribute (User Type) to my application?

I saw that only these attributes were supported for Identity Center:
${user:AD_GUID}
${user:email}
${user:familyName}
${user:givenName}
${user:middleName}
${user:name}
${user:preferredUsername}
${user:subject}

Any help would be appreciated. 
Thank you

Accepted Answer

Hi!

The *User Type* that you speak of, is an optional attribute in the IAM Identity Center User creation process. As such, we will have to figure out if we need to pass additional data while signing in users. The same can be done by using the method demonstrated in the following AWS Documnetation *[Map attributes in your application to IAM Identity Center attributes](https://docs.aws.amazon.com/singlesignon/latest/userguide/mapawsssoattributestoapp.html)*

Does this help?

If I have helped answer your query, please mark it as an **Accepted Answer**

Identity Center Attribute Mapping

Relevanter Inhalt