keycloak-scim/docs/guides/securing-apps/partials/saml/roleidentifiers_element.adoc


== RoleIdentifiers element

The `RoleIdentifiers` element defines what SAML attributes within the assertion received from the user should be used
as role identifiers within the Jakarta EE Security Context for the user.

[source,xml]
----

<RoleIdentifiers>
     <Attribute name="Role"/>
     <Attribute name="member"/>
     <Attribute name="memberOf"/>
</RoleIdentifiers>
----

By default `Role` attribute values are converted to Jakarta EE roles.
Some IdPs send roles using a `member` or `memberOf` attribute assertion.
You can define one or more `Attribute` elements to specify which SAML attributes must be converted into roles.
initial saml 2016-06-02 16:07:45 +00:00
Move saml documentation to guides Closes #31330 Signed-off-by: rmartinc <rmartinc@redhat.com> 2024-07-22 08:16:24 +00:00			`== RoleIdentifiers element`
initial saml 2016-06-02 16:07:45 +00:00
saml general config 2016-06-02 20:50:43 +00:00			The `RoleIdentifiers` element defines what SAML attributes within the assertion received from the user should be used
CIAM-950 Changing Java EE and JavaEE to Jaka rta EE (#1268) 2021-11-10 10:45:59 +00:00			`as role identifiers within the Jakarta EE Security Context for the user.`
saml general config 2016-06-02 20:50:43 +00:00
initial saml 2016-06-02 16:07:45 +00:00			`[source,xml]`
			`----`

			`<RoleIdentifiers>`
			`<Attribute name="Role"/>`
			`<Attribute name="member"/>`
			`<Attribute name="memberOf"/>`
			`</RoleIdentifiers>`
			`----`

CIAM-950 Changing Java EE and JavaEE to Jaka rta EE (#1268) 2021-11-10 10:45:59 +00:00			By default `Role` attribute values are converted to Jakarta EE roles.
WIP: mod_auth_mellon edits 2017-02-03 22:14:17 +00:00			Some IdPs send roles using a `member` or `memberOf` attribute assertion.
saml general config 2016-06-02 20:50:43 +00:00			You can define one or more `Attribute` elements to specify which SAML attributes must be converted into roles.
initial saml 2016-06-02 16:07:45 +00:00