Configure SSO: Map Attribute Statement Tags

The mapping feature allows EnterWorks to recognize attribute statement tags in the IDP's response that are different than what EnterWorks expects. To configure EnterWorks to recognize the new statement tags:

  1. Create a JSON file that maps the attribute statements EnterWorks is looking for to the tags the IDP is using. The JSON file must be named:
    sso-mappings.json
    and must be located in:
    <drive>:\Enterworks\enable2020\services\sso-mappings\
  2. The sso-mappings.json file has five key:value pairs:
    {
    	"login": "login",
    	"firstName": "firstName",
    	"lastName": "lastName",
    	"email": "email",
    	"groups": "groups"										
    }
  3. The key is what EnterWorks is looking for. Replace the value with the tag the IDP is using. For example, if the IDP is using the "email" tag as the login value, the sso-mappings.json file would have a key:value pair of "login": "email" as shown below.
    {
    	"login": "email",
    	"firstName": "firstName",
    	"lastName": "lastName",
    	"email": "email",
    	"groups": "groups"
    }
  4. The sso-mappings.json file only needs to contain key:value pairs for the attribute statement tags that are different from what EnterWorks is searching for. For example, if the IDP is using the "email" tag as the login value but the rest of the attribute statements are tagged as expected, the sso-mappings.json file could only have the key:value pair for "login": "email" as shown below.
    {
    	"login": "email"
    }
    
  5. The create-<service-name>-service.cmd scripts should exist in the following folder. If they do not, create the create-service scripts.
    <drive>:\Enterworks\enable2020\services\install
  6. Edit the create-enable-web-server-service.cmd file:
    1. Set the ssoMappingConfig parameter to indicate the location of the sso-mapping.json file:
      -ssoMappingConfig=<drive>:\Enterworks\enable2020\services\sso-mappings\
    2. Save the script.
    3. Use the script.