Assertion attribute Role mappings for SAML

[Niranpsk]

I have SAML SSO as external identity sources working fine and looking for Assertion attribute for role mapping. SAML from identity source is passing values but i cant find the mapping name on the doc.

From identity source;
…
<saml:Attribute NameFormat=“urn:oasis:names:tc:SAML:2.0:attrname-format:basic” Name=“ROLE ATTRIBUTE NAME”>
<saml:AttributeValue xmlns:xsi=“http://www.w3.org/2001/XMLSchema-instance” xsi:type=“xs:string”>Admins</saml:AttributeValue>
<saml:AttributeValue xmlns:xsi=“http://www.w3.org/2001/XMLSchema-instance” xsi:type=“xs:string”>CMP Users</saml:AttributeValue>
</saml:Attribute>
<saml:Attribute NameFormat=“urn:oasis:names:tc:SAML:2.0:attrname-format:basic” Name=“lastName”>
…

Morpheus SAML;

is there any guide / document to configure role mapping?

Thanks.

[Niranpsk · Accepted solution]

I just fixed using this solution. Role Mapping is working now.

Keycloak SAML SSO - Role Mapping Administration

When using Keycloak as an identity source via SAML, a role mapper must be defined on the Keycloak client configured for Morpheus to map Keycloak roles to Morpheus roles. Keycloak [1] The ‘Role attribute name’ that is set on the mapper will need to be defined in Morpheus identity source settings and ‘Single Role Attribute’ needs to be ‘On’. [2]