Skip to content

Verify SAML Auth0 Attribute Mapping

Overview

Clients can send additional meta data about their users to track on our end. The values for family_name and given_name are not always sent by default, but if the client has configured their identity provider to send these values they should also show up in the CRM and the CSM should be able to see them in the user profile.

Steps

Follow these steps to verify if the attribute mapping is working correctly:

  1. Log into the Auth0 production account.

  2. Go to Authentication -> Enterprise -> SAML (or OpenId Connect)

  3. Find the connection for the organization in question and copy the name

  4. Go to User Mangagement -> Users in the main navigation

  5. Select Search by: Connection from the drop down and insert the connection name

  6. If they have had successful logins there should be users in the search result

  7. Select a user and scroll down to the Identity Provider Attributes

  8. If the provider mapped for example family_name this field should have a value now

Expected Results

When attribute mapping is properly configured:

  • The Identity Provider Attributes section will contain the mapped values
  • Common attributes include family_name, given_name, email, etc.
  • These values should match what the customer's IdP is sending
  • The same data should be visible in the CRM system

Troubleshooting

If attributes are not appearing:

  • Verify the customer has configured their IdP to send these attributes
  • Check the SAML assertion/response to confirm the attributes are being sent
  • Ensure the Auth0 connection has the correct attribute mapping configuration
  • Contact the customer to confirm their IdP settings