Step 4: Configure User Attributes and Claims
The Oracle Cloud Infrastructure Console enterprise application template is seeded with the required attributes, so there is no need to add any. However, you must make the following customizations:
- In the User Attributes & Claims section, click Edit in the upper-right corner. The Manage Claim panel appears.
- Next to the Name identifier value field, click Edit.
- Under Required claim, select Unique User Identifier (Name ID).
- Select Email address and change it to “Persistent.”
- For Source, select Attribute.
- For Source attribute, select user.userprincipalname.
- Configure additional claims by referring to the below table. Note: Only oc_primaryworklocation is mandatory and other additional claims are optional.
Table 1-1 SAML Attribute Mapping
Claim Name | Type | Value | Mandatory Claim (Yes/No) |
---|---|---|---|
oc_primaryworklocation |
Attribute |
Mandatory Single Valued User Attribute. Indicates the user’s primary work location. Possible Values:
Note: Ensure this claim is created and if it is not created in Azure AD, it will significantly impact OPERA Cloud operations. |
Yes |
#upper($(assertion.oc_ownercode)) |
Attribute |
This is the owner code for the user in OPERA Cloud Sales and Event Management. |
No |
oc_employeenumber |
Attribute |
Employee number is the unique employee number in the customer's employee management system. |
No |
#upper($(oc_hubs)) OR oc_hubs |
Attribute |
oc_hubs is a String array in IAM Domain and IdP claim mapping should map a multi-valued attribute to oc_hubs. Single value attribute claims from Azure should not be mapped to oc_hubs. |
No |
oc_actas |
Attribute |
You can send values for a new user's Act As field from your identity provider, which eliminates overhead for an admin to manually assign Act As for a new user in OPERA Cloud Role Manager. Possible
Values:
|
No |
oc_actat |
Attribute |
You can send values for a new user's Act At field from your identity provider, which eliminates overhead for an admin to manually assign Act At for a new user in OPERA Cloud Role Manager. Possible
Values:
|
No |
Figure 1-1 Attributes & Claims
