#SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

RE: #SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

sathishkumars — Wed, 20 Jan 2016 14:48:51 GMT

Thanks a lot Tom...

RE: #SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

Tom Ryan — Wed, 20 Jan 2016 03:23:48 GMT

I don't think there is any functionality OOTB to take advantage of this, I think the best approach as I mentioned will be to design a process model to connect to the IDP to pull in this information. Depending on the methods available for doing this on the IDP, you may need to create a custom plugin to assist with this task.

RE: #SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

sathishkumars — Tue, 19 Jan 2016 15:45:26 GMT

Thanks again Tom. Yes - our use case is to use the extra attributes passed by IDP in an Appian process model/app. Is this possible at all ? Because, SAML XML provides the feature of adding extra attributes other than just the authentication statement.

For e.g. <xml:Attribute Name="the name"> <saml:AttributeValue xmlns:xs="www.w3.org/.../XMLSchema" xsi:type="xs:string">the value</saml:AttributeValue> </saml:Attribute>

RE: #SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

Tom Ryan — Tue, 19 Jan 2016 02:41:19 GMT

Do you mean for use in a process model/app? As far as I know the fields on the Admin console page are only used for the authentication process. If you want to sync data from your IDP with Appian accounts, then the best approach is probably to set up an additional scheduled process for pulling in this data, eg for LDAP: forum.appian.com/.../LDAP_Synchronization.html

RE: #SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

sathishkumars — Mon, 18 Jan 2016 12:39:22 GMT

Thank you Tom. Our use case is that the IDP can pass policy number in the SAML token Attribute, and we need to know how can the policy number be extracted in Appian ?

But also, can you please let us know on how can we extract the First/Last name or E-mail attribute in Appian ?

RE: #SAML. We are on Appian V7.11 cloud and implemented SSO via SAML wherein Appian

Tom Ryan — Mon, 18 Jan 2016 04:15:16 GMT

You may be able to specify these in the additional attribute fields in the SAML config Admin Console page, under 'E-mail Attribute', 'First/Last Name Attribute'.

If these do not meet your requirements, can you add some more detail regarding the use case here?