SAML Assertion Attributes Configuration

MicroStrategy Library uses information about users from the SAML Response to create Intelligence server sessions. The settings are how SAML users are mapped or imported to MicroStrategy.

The user properties that MicroStrategy uses for mapping are:

Required Attributes:

Name ID - Maps to Trusted Authenticated Request User ID of the MicroStrategy user as defined in MicroStrategy Developer.

Optional Attributes:

DisplayName - Used to populate or link to a MicroStrategy user's Full name
Email - User email
DistinguishedName - Used to extract additional user information from the LDAP server
Groups - List of groups user belongs to

Attribute names are case sensitive. Make sure any SAML attribute name configured here is an exact match to the application configuration.

In the case where IdP does not allow customization of SAML attribute names and provides fixed names instead, you may modify the corresponding attribute names in MstrSamlConfig.xml generated previously.

For more information on mapping users between a SAML IdP and MicroStrategy, see Mapping SAML Users to MicroStrategy