keycloak-scim/topics/saml/java/general-config/roleidentifiers_element.adoc

21 lines
556 B
Text
Raw Normal View History

2016-06-02 16:07:45 +00:00
===== RoleIdentifiers element
[source,xml]
----
<RoleIdentifiers>
<Attribute name="Role"/>
<Attribute name="member"/>
<Attribute name="memberOf"/>
</RoleIdentifiers>
----
This element is optional.
It defines which SAML attribute values in the assertion should be mapped to a Java EE role.
By default `Role` attribute values are converted to Java EE roles.
Some IDPs send roles via a `member` or `memberOf` attribute assertion.
You define one or more `Attribute` elements to specify which SAML attributes must be converted into roles.