send AWS SSO username as a attribute in SAML assertion

0

Someone else has asked a fairly similar question in this forum, but the reply there was "customer service helped me through this. thanks"

I have a setup with AWS SSO and its identity source is AWS SSO (not AD or external)
I have configured some users and am able to integrate fairly successfully with some external applications

However I have an integration with say Jenkins and the default attribute mapping puts Subject as ${user:email}
How can I change this to the username in AWS SSO. By this I do not mean the display name of firstname lastname. I want the actual username that is configured in aws sso to be sent. (the one that users login to the AWS SSO user portal with)
I have tried replacing it with $(user.preferredUsername} but that results in the display name in the assertion

On a related note, When i add a completely new attribute to the attribute mapping and call it say "testattr" and then choose ${user:email} the SAML assertion ends up with the exact string ${user:email} instead of the value of the email for the user.

I am sure I am missing something basic, so any help would be appreciated.

Edited by: subkal on Oct 14, 2020 1:06 PM

subkal
demandé il y a 4 ans755 vues
2 réponses
0

Try: ${user:subject}, for a native identity source it contains the user login name rather than the email. Hope this helps! K

KrisH
répondu il y a 4 ans
0

Thank you. That worked

subkal
répondu il y a 4 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions