Creating an Identity Mapping data instance

If you register a user through OAuth 2.0 Client Registration that is authenticated through SAML, you need to specify how an operator is identified by the Pega server. Use the Identity Mapping data instance to create a profile, and configure which attributes to map from a SAML assertion to which operator record properties, so that you can specify how to identify an operator.

1. In Designer Studio, click Records > Security > Identity Mapping.
2. Click Create.
3. In the Name field, enter the name of the identity mapping profile.
4. In the Short description field, enter a short description of the identity mapping profile.
5. in the Source field, select SAML 2.0 Assertion.
6. Click Create and open.
7. On the SAML 2.0 tab, in the Signature verification section, in the Truststore field, enter the same keystore that is used by the SAML 2.0 assertion and verifies the token.
8. Enter an attribute to map the .pyUserIdentifier property to identify an existing operator.
9. In the Processing options section, in the Post processing activity field, enter the name of your post-processing activity. The post-processing activity can connect to any external entity to get additional data, and the activity can enrich the OperatorID page with attributes available on the assertion page. You can use the pzSAMLBearerIdentityMappingAct activity as a reference while creating your own post-processing activity.
10. Click Save.

Open topic with navigation