1. Account Administration
  2. Authentication
  3. SAML Single Sign-on
  4. IdP Metadata and SAML Attributes
  5. SAML Response Example

SAML Response Example

The following is an example of a SAML Response, showing parts of the SAML assertion element. If you do not provide the required attributes in your file, you receive error messages, for example: Email must be provided using NameID value or the email attribute.

The following example illustrates one way to provide these values:

          ...
<saml:Subject>
             <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
                          SPNameQualifier="http://www.netsuite.com/sp"
                          >jsmith@example.com</saml:NameID>
...
             <saml:AttributeStatement>
                 <saml:Attribute Name="email">
                     <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">jsmith@example.com</saml:AttributeValue>
                </saml:Attribute>
                <saml:Attribute Name="account">
                     <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">123456</saml:AttributeValue>
                </saml:Attribute>
  <saml:Attribute Name="role">
                     <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1010</saml:AttributeValue>
                </saml:Attribute>
                <saml:Attribute Name="site">
                     <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">1</saml:AttributeValue><saml:AttributeStatement>
             </saml:AttributeStatement>
...

Related Topics

General Notices