Mapping the 'name' SAML Attribute

Overview

When creating a SAML connection, there is a mappings tab that allows setting incoming Identity Provider (IdP) SAML Attributes to an Auth0 profile. This article explains why, when attempting to update the 'name' attribute used by Auth0 in the user profile, the 'name' attribute does not update. The mappings look like this:
 

{
  "name": "http://schemas.saml-idp-claim.com/newClaim"
}


Note that other attributes seem to allow mapping as expected. For example, the following mapping will successfully update the user profile's 'given_name' attribute with a different incoming SAML Attribute:
 

{
  "given_name": "http://schemas.saml-idp-claim.com/newClaim2"
}

 

Applies To

  • SAML Attributes
  • Name

Cause

Currently, it is not possible to overwrite what the 'name' attribute is set as from the Service Provider (SP) side. Auth0 will use whatever value the IdP sends for the 'name' attribute. It is possible that the IdP could update, on their end, what value is sent for the 'name'. 

Solution

If the 'name' attribute needs to be set to a particular value, work with the IdP to ensure the expected value is sent for that attribute. 

Recommended content

No recommended content found...