Search

Understanding the Required Attributes in the AttributeStatement Section

The information in this section is to help your IT team to avoid any potential problems. Your identity provider must include the following attributes in the AttributeStatement section of SAMLResponse Assertion message:

  • E-mail address
  • First Name
  • Last Name

E-mail Address

Every TrustArc user is required to have a valid email address. Your company’s identity provider must be configured to send the user email address to TrustArc in its assertion message. Different identity providers may send the email address in different common fields. TrustArc will look for the email address in these attributes checked in following order:

  • EmailAddress
  • email
  • mail
  • User.email
  • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

First and Last names

Your company’s identity provider must be configured to send user First and Last name in its assertion. TrustArc displays users’ First and Last name in the Assessment Manager fields where user selection is required. Different identity providers may send the first and last name in different common fields. TrustArc will look for the first and last name in these attributes checked in following order:

  • FirstName
  • first_name
  • firstname
  • firstName
  • User.FirstName
  • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
  • LastName
  • last_name
  • Lastname
  • lastName
  • User.LastName
  • http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname