Custom SAML Attributes

Hi all

I’m working on integrating Duo as a SAML app with Zitadel, but I’ve run into an issue with attribute mappings.

Right now, Zitadel’s SAML attributes are fixed (emailemail, firstNamefirstName, etc.), but Duo requires custom/renamed attributes for the integration to work. Specifically, Duo expects the following mapping:

| Default Attribute         | SAML IdP         |
| ------------------------- | ---------------- |
| <Username>                | Username         |
| <Email Address>           | Email            |
| <Display Name>            | DisplayName      |
| <First Name>              | FirstName        |
| <Last Name>               | LastName         |
| <Entra Federated User ID> | EntraImmutableID |

| Default Attribute         | SAML IdP         |
| ------------------------- | ---------------- |
| <Username>                | Username         |
| <Email Address>           | Email            |
| <Display Name>            | DisplayName      |
| <First Name>              | FirstName        |
| <Last Name>               | LastName         |
| <Entra Federated User ID> | EntraImmutableID |

Is there currently a way to customize or rename SAML attributes in Zitadel? If not, is this something that’s planned, or would I need to request it as a feature?

Thanks in advance!

ZITADEL•7mo ago•

25 replies

Koen

Custom SAML Attributes

| Default Attribute         | SAML IdP         |
| ------------------------- | ---------------- |
| <Username>                | Username         |
| <Email Address>           | Email            |
| <Display Name>            | DisplayName      |
| <First Name>              | FirstName        |
| <Last Name>               | LastName         |
| <Entra Federated User ID> | EntraImmutableID |

| Default Attribute         | SAML IdP         |
| ------------------------- | ---------------- |
| <Username>                | Username         |
| <Email Address>           | Email            |
| <Display Name>            | DisplayName      |
| <First Name>              | FirstName        |
| <Last Name>               | LastName         |
| <Entra Federated User ID> | EntraImmutableID |

Is there currently a way to customize or rename SAML attributes in Zitadel? If not, is this something that’s planned, or would I need to request it as a feature?

Thanks in advance!

Continue the conversation

Join the Discord to ask follow-up questions and connect with the community

ZITADEL

ZITADEL - Identity infrastructure, simplified for you.

4,550 Members

Join

Custom SAML Attributes

Custom SAML Attributes

Continue the conversation

ZITADEL

Continue the conversation

ZITADEL

Similar Threads