Attribute Mapping in Laserfiche Cloud

Use the Attribute Mapping page to direct how Laserfiche locates additional user claims in a SAML token.

Configuring attribute mappings is optional for the default use case, but it is required to for Just-in-time provisioning.

Use Case Is Required Notes
Signing in through single sign-on (SSO) No Administrators can choose to optionally map attributes like display name for cosmetic display, but no mapping is required for users to sign in through SSO.
SCIM Provisioning No SCIM synchronizes data using an API and does not need to map SAML token claims.
Just-in-time Provisioning Yes Laserfiche Cloud needs mapped attributes in order to create and update user account information during sign-in.

Follow these steps to map attributes in Laserfiche Cloud

  1. Navigate to Laserfiche Cloud and sign in.
  2. In the left pane, click Settings.
  3. Select the Identity Provider tab.
  4. Under Identity Provider, select the Attribute Mappings tab.
  5. Enter the attribute Name that you specified in your identity provider. Do not use the attribute Value.
  6. Once finished, click Save changes.

Common Attribute Examples

Identity Provider Attribute Name Laserfiche Attribute Name Purpose
email Email Used to identity users
givenName/ firstName First name Shown in the user profile
sn / lastName Last name Shown in the user profile
groups Group Required in just-in-time provisioning for assigning licenses

Additional Information