Example

FOSSA Accepts additional SAML attributes such as assigning a user a role or to a team. If the team exists the user will be added, else a new team is created.

Example SAML Attributes

📘

You can pass a team name and team role

Your SAML provider can use conditional logic to give different access levels to different teams in the format TeamName::TeamRole

        <saml:AttributeStatement xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            
            <saml:Attribute Name="role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xsi:type="xs:string">
                    Admin
                </saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="teams" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
                <saml:AttributeValue xsi:type="xs:string">
                    Team A::Team Admin
                </saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string">
                    Team B
                </saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>