Adding Email Address in SAML Token

mcuziac · January 28, 2020, 10:14am

I’m trying to integrate okta with a 3rd party app that requires the following claims to be configured in the SAML 2.0 token:

NameID Format - urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
emailaddress - http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

How would i add the email addresss claim? I can add it as a custom attribute, but the only formats that are available are Unspecified, Uri Reference or Basic.

dragos · January 29, 2020, 4:48am

Hi @mcuziac

Please check SAML Assertion Inline Hook feature to add the claim in the SAML response.

mcuziac · January 29, 2020, 6:04pm

Thanks @dragos,

From what I see in the documentation, it seems that the inline hooks might indeed do what I want. Unfortunately, I don’t think it’s reasonable to ask each of our clients to implement these.

Does anybody have a simpler idea?

Mihai,