Attribute Mapping Examples

<?xml version="1.0" encoding="UTF-8"?> <saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:xs="<http://www.w3.org/2001/XMLSchema>" ID="_7fcd6173-e6e0-45a4-a2fd-74a4ef85bf30" IssueInstant="2017-11-15T16:19:06.310Z" Version="2.0"> <saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">[http://test.rackspace.com</saml2:Issuer>](http://test.rackspace.com</saml2:Issuer<); <saml2p:Status> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/> </saml2p:Status> <saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_406fb7fe-a519-4919-a42c-f67794a670a5" IssueInstant="2017-11-15T16:19:06.310Z" Version="2.0"> <saml2:Issuer>[http://my.rackspace.com</saml2:Issuer>](http://my.rackspace.com</saml2:Issuer<); <saml2:Subject> <saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">john.doe</saml2:NameID> <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"> <saml2:SubjectConfirmationData NotOnOrAfter="2017-11-17T16:19:06.298Z"/> </saml2:SubjectConfirmation> </saml2:Subject> <saml2:AuthnStatement AuthnInstant="2017-11-15T16:19:04.055Z"> <saml2:AuthnContext> <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport </saml2:AuthnContextClassRef> </saml2:AuthnContext> </saml2:AuthnStatement> <saml2:AttributeStatement> <saml2:Attribute Name="roles"> <saml2:AttributeValue xmlns:xsi="<http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">nova:admin</saml2:AttributeValue> </saml2:Attribute> <saml2:Attribute Name="domain"> <saml2:AttributeValue xmlns:xsi="<http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">323676</saml2:AttributeValue> </saml2:Attribute> <saml2:Attribute Name="email"> <saml2:AttributeValue xmlns:xsi="<http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">[email protected]</saml2:AttributeValue> </saml2:Attribute> <saml2:Attribute Name="bar"> <saml2:AttributeValue xmlns:xsi="<http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">BAR!</saml2:AttributeValue> </saml2:Attribute> <saml2:Attribute Name="FirstName"> <saml2:AttributeValue xmlns:xsi="<http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">John</saml2:AttributeValue> </saml2:Attribute> <saml2:Attribute Name="LastName"> <saml2:AttributeValue xmlns:xsi="<http://www.w3.org/2001/XMLSchema-instance>" xsi:type="xs:string">Doe</saml2:AttributeValue> </saml2:Attribute> </saml2:AttributeStatement> </saml2:Assertion> </saml2p:Response> 

 mapping: version: RAX-1 rules: - local: user: domain: "{D}" name: "{D}" email: "{D}" roles: "{D}" expire: "{D}"

mapping: version: RAX-1 rules: - local: user: domain: "{D}" name: "{D}" email: "{D(name)}@rackspace.com" roles: "{D}" expire: "{D}"

mapping: version: RAX-1 rules: - local: user: domain: "{D}" name: "{D}" email: "{D(name)} <{D(name)}@{D(domain)}.rackspace.com>" roles: "{D}" expire: "{D}"

mapping: version: RAX-1 rules: - local: user: domain: "{D}" name: "{D}" email: "{At(FirstName)} {At(LastName)} <{D(name)}@{D(domain)}.rackspace.com>" roles: "{D}" expire: "{D}"