Strategy ONE

SAML Assertion Attributes Configuration

Strategy Library uses information about users from the SAML Response to create Intelligence server sessions. The settings are how SAML users are mapped or imported to Strategy One.

The user properties that Strategy One uses for mapping are:

Required Attributes:

  • Name ID - Maps to Trusted Authenticated Request User ID of the Strategy user as defined in MicroStrategy Developer.

Optional Attributes:

  • DisplayName - Used to populate or link to a Strategy user's Full name
  • Email - User email
  • DistinguishedName - Used to extract additional user information from the LDAP server
  • Groups - List of groups user belongs to

Attribute names are case sensitive. Make sure any SAML attribute name configured here is an exact match to the application configuration.

In the case where IdP does not allow customization of SAML attribute names and provides fixed names instead, you may modify the corresponding attribute names in MstrSamlConfig.xml generated previously.

For more information on mapping users between a SAML IdP and Strategy One, see Mapping SAML Users to Strategy