Independent study lab

This is an independent, free, learning-only student project. It respects every company and vendor. Trademarks belong to their owners. It is not affiliated with or endorsed by Amazon Web Services, Cisco, Genesys, Salesforce, Twilio, or any other company. If you have a concern, the page will be removed or corrected promptly through the contact form. Nothing here is sold. There are no ads. The author is happy to volunteer for any organization.

Contact: https://cyphermonkeylabs.com/#contact

SAML attributes that make a user real — Learn it in 5 minutes

About five minutes of reading

A successful SAML login that lands without a routing profile is a user who cannot take a contact.

Map the role, the security profile, and the routing profile from the assertion. Hierarchy is optional and easy to get wrong if your IdP sends a display name and Connect expects the configured group.

IAM Identity Center is a reasonable IdP. It still federates with SAML. Global Resiliency adds a Regional sign-in endpoint. The CCP allow list includes it only when you have onboarded.

Number on this page: Required 3. Role, security profile, routing profile

Confirm before relying. Prices, quotas, and exam names change. Use the source linked on this page.

Sources and go deeper

sources.json