Mappers
The Mappers in the context of authentication and authorization are used to map and transform attributes or claims from one representation to another.
note
Currently, the Mappers are not configured for IWS Applications.
Here's how you view
1 Go to Dashboard > Applications.
2 Click on the application you wish to view.
3 Click on Mappers.
4 You will have the option to add the in-built mapper or create one.
Commmon In-Built Mappers
| Attribute | Description |
|---|---|
| Protocol | The XML-based open standard used for exchanging authentication and authorization data is Security Assertion Markup Language (SAML), which is commonly used for Single Sign-On (SSO). |
| Name | You need to provide a unique name for the mapper. |
| Mapper Type | You can select the provided mapper type based on your needs. |
| Add to ID token | When this option is enabled, the claim will be included in the ID token. The ID token is a JSON Web Token (JWT) that contains information about the authenticated user. Including the claim in the ID token allows the client application to access this claim directly without making additional requests to the userinfo endpoint. (NOTE: This does not apply for SSO application. |
| Add to userinfo | If this option is enabled, the claim will be added to the userinfo response. The userinfo response is an endpoint that provides additional information about the authenticated user. When the claim is included in the userinfo response, the client application can access this claim by making a separate request to the userinfo endpoint. (NOTE: This does not apply for SSO application. |
Mappers specific to Single Sign-On (SSO)
| Attribute | Description |
|---|---|
| Script | Provide the JavaScript function code that performs the attribute value evaluation. |
| Single Value Attribute | Enable this option if you want to store all values under one attribute with multiple attribute values. |
| Friendly Name | You have the option to provide a more human-readable form of the attribute's name, especially if the actual attribute name is cryptic. |
| SAML Attribute Name | Enter the desired SAML attribute name for the attribute being mapped. |
| SAML Attribute NameFormat | Choose the appropriate SAML Attribute NameFormat from options like basic, URI reference, or unspecified. |