WSO2 identity server user customization

Question

We are currently looking to use the WSO2 identity server for SSO via SAML2. Everything is working fine but we need to add custom attributes to the user profile and i don't find any documentation about it. We plan to use a JDBC store (mysql). From what, I have found on the web, it seems to be possible but I have not found any documentation on how to do it.

Thanks

Answer 1

if you are using JDBC user store manager, It is easy to add custom attributes. You can use claim management configuration UI in the management console. Under the wso2 claim dialect, you need to add a new claim mapping. In claim mapping, you can provide any mapped attribute for JDBC user store. But, if you are using LDAP or AD or any custom user store, you need to provide a proper mapping between user store attribute and the claim. You can find more details from here.

Then you need to select newly added claim uri in the SAML2 SSO configuration page.

Answer 2

To change the fields in the User Profile:

Through trial-and-error I found that these fields are determined by the settings of the individual claims fields in the Claim Management / wso2.org/claims list. If you first note the order of the fields in the User Profile, they correspond to the order of how the individual claims are set in the claims list (in this case wso2.org/claims). But you can only going into the detail of each individual claim.

Click Configure tab -- Claims Management -- wso2.org/claims and you will see this list of all claims for wso2.org. Pull the drop down for each claim that is in the User Profile and you will see that the claim's "Display Order" corresponds to the order of the field in the User Profile.

To change the order, click Edit for that claim and either change the Display Order field to another number, or change it to zero to take it off the User Profile (also uncheck "Supported By Default" and uncheck "Required").

To add a field to the User Profile, click the drop down for the claim you wish to add, Edit it, change its Display Order from zero to a number of your own choosing, check "Supported By Default, and check "Required" if needed.

Repeat for each field you need to remove or add. Your User Profile will now have the fields you want.