AWS Single Sign-On
User Guide

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.

Map Attributes in Your Application to AWS SSO Attributes

Some service providers require custom SAML assertions to pass additional data about your user sign-ins. In that case, use the following procedure to specify how your applications user attributes should map to corresponding attributes in AWS SSO.

To map application attributes to attributes in AWS SSO

  1. Open the AWS SSO console.

  2. Choose Applications.

  3. In the list of applications, choose the application where you want to map attributes.

  4. On the application details page, choose the Attribute mappings tab.

  5. Choose Add new attribute mapping

  6. In the first text box, enter the application attribute.

  7. In the second text box, enter the attribute in AWS SSO that you want to map to the application attribute. For example, you might want to map the application attribute Username to the AWS SSO user attribute email. To see the list of allowed user attributes in AWS SSO, see the table in Attribute Mappings.

  8. In the third column of the table, choose the appropriate format for the attribute from the menu.

  9. Choose Save changes.