Managing authentication sources > SAML 2.0 supported IdP > Adding IdP authentication sources > Authentication Sources page > Managing claims > Set the SSO ID identifier claim

Set the SSO ID identifier claim

1. From the navigation bar, click Authentication Sources.

   The Authentication Sources page opens.

   

   Use this page to set up and manage the authentication sources for your Single Sign-On experience. The available authentication sources are listed in the grid. You can easily identify the authentication source(s) you are using by looking at the Enabled column. Yes indicates an authentication source is enabled and in use. No indicates the authentication source is not in use. More than one authentication source can be enabled.

   If more than one authentication source is enabled, a user is prompted for an authentication source selection when logging in. You can set an advanced setting (Save Authentication Source Selection) to allow the initial authentication source selection to be remembered via a cookie.

   You can learn more about the different authentication sources in the Managing authentication sources topic.

   Buttons, links, and options

   

   Click to edit an authentication source.

   

   Opens the Add Authentication Source page so you can define your IdP. There are several methods you can use to define your IdP. Refer to Adding IdP authentication sources for details.

   

   Click this button to manage claims. This button only appears after a SAMLResponse is received from the IdP. Life Suite Authentication does not know about what claims assertions are coming from the IdP until it has received that first SAMLResponse feed.

   Note: This button only applies to IdP authentication sources not Life Suite Login or Global GetSession authentication sources.

2. In the grid beside an IdP authentication source, click .

   The Manage Claims page opens.

   

   When using an IdP, the feed coming from your system to Life Suite Authentication contains a variety of information, including identity information, based on a standard protocol. Life Suite modules require a SSO ID to identify a user in all of our modules. Life Suite Authentication cannot automatically identify from the IdP feed which identity information to use as the SSO ID. You must select and make the correlation here on the Manage Claims page.

   Managing claims only applies to an IdP. It is not needed or displayed for Life Suite Login or Global GetSession.

   Settings

   SSO Identifier claim

   The current claim used to obtain the SSO ID is shown here. This should match the SSO ID used in the Life Suite modules. An example value from the last SAMLResponse containing claims is shown in parenthesis.

   New SSO Identifier claim

   Select a new claim that contains a value that matches the SSO ID used in the Life Suite modules. This field only needs to be used if the current value does not match the SSO ID value. An example value from the last SAMLResponse containing claims is shown in parenthesis.

3. In the New SSO Identifier claim drop-down, select the value that correlates to the SSO ID value.
4. Click Save.