Claim Attributes and Formats for Single Sign-On

Depending on your identity provider (IdP), you (or your IT department) might need to use the following claim attributes and formats when configuring single sign-on (SSO) with Central. See Process for Single Sign-On.

Claim Attributes

• email

  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress or User.email or mail

• first name

  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname or first_name or User.FirstName or givenName

• last name

  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname or last_name or User.LastName or sn

• department

  http://schemas.xmlsoap.org/ws/2005/05/identity/claims/department

Formatting for Attributes

Other claim attributes are not yet in use. However, all attributes should be formatted as follows:

<AttributeStatement><Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"><AttributeValue>Value Text<AttributeValue></AttributeStatement>