Set up federation with external identity providers

This section describes how to set up external identity providers so you can integrate Identity Administration with the identity provider your organization already uses.

You can establish a trust relationship between the Service Provider (SP) and an external Identity Provider (IDP) using SAML tokens. By establishing this trust relationship, you can provide access to the resources that you want to share.

Before you begin

• You need group attribute values and IdP metadata to finish the configuration.

• Ensure your SAML file includes the required elements.

  SAML 2.0 is automatically selected because we currently only support this federation type.

  The following attributes are consumed by federations with other Cloud customers.

  Additional attributes are supported and can be configured with the external IdP SAML configuration. These can also be configured on the Service Provider side with the B2B application template.

  Mandatory and optional attributes

  Attributes
  Mandatory	userprincipalname
  Optional	DisplayName, Description, EmailAddress, HomeNumber, LoginName, MobileNumber, Group and OfficeNumber

  For example:

  setAttribute("userprincipalname", LoginUser.Get("userprincipalname"));