How To: Add a Fixed Value to a SAML Assertion

Version Affected: All

 

Overview

This article explains how to configure a SecureAuth realm to send a fixed (static) value for a specific attribute in every Security Assertion Markup Language (SAML) assertion it issues, regardless of which user is authenticating. For example, you might need every assertion to include an attribute called Example with the value 440.

Set the Fixed Value

1. Pick an attribute that is not already in use, for example Auxid3.
2. Open the realm's System Info tab and scroll to the bottom to edit the web.config.
3. Set the Default value for that attribute to the fixed value you want sent. This value is case-sensitive, so match it exactly, as shown below.

4. On the Post Auth page, add the attribute so it is included in the SAML assertion, as shown below.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.