Skip to content
Service Provider \(SP\) system properties › SAML › Multi-Provider single sign-on \(SSO\) › Authentication › Access Management
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Set up a NameID policy for SAML

Set up a NameID policy for SAML. SAML 2.0 requires the IdP to exchange a NameID token with the service provider.

Before you begin

Role required: sso_config_admin, business_rule_admin, script_include_admin

About this task

For the SAML 2.0 integration the NameID token must map to a particular field in the User table. The integration uses the NameID token's value to determine what user the IdP authenticates.

Procedure

  1. Browse the IdP metadata to find the NameIDFormat element that contains a value of emailAddress.

    The value of this element is the default format that the integration uses.

  2. Review other NameIDFormat elements to determine if there are formats that match other fields in the User table.