send AWS SSO username as a attribute in SAML assertion

0

Someone else has asked a fairly similar question in this forum, but the reply there was "customer service helped me through this. thanks"

I have a setup with AWS SSO and its identity source is AWS SSO (not AD or external)
I have configured some users and am able to integrate fairly successfully with some external applications

However I have an integration with say Jenkins and the default attribute mapping puts Subject as ${user:email}
How can I change this to the username in AWS SSO. By this I do not mean the display name of firstname lastname. I want the actual username that is configured in aws sso to be sent. (the one that users login to the AWS SSO user portal with)
I have tried replacing it with $(user.preferredUsername} but that results in the display name in the assertion

On a related note, When i add a completely new attribute to the attribute mapping and call it say "testattr" and then choose ${user:email} the SAML assertion ends up with the exact string ${user:email} instead of the value of the email for the user.

I am sure I am missing something basic, so any help would be appreciated.

Edited by: subkal on Oct 14, 2020 1:06 PM

subkal
질문됨 4년 전793회 조회
2개 답변
0

Try: ${user:subject}, for a native identity source it contains the user login name rather than the email. Hope this helps! K

KrisH
답변함 4년 전
0

Thank you. That worked

subkal
답변함 4년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠