SAML Attribute Mapper

Map SAML attributes to application claims

During SAML single sign-on, the identity provider (IdP) sends an XML assertion that includes an AttributeStatement with claim-like values (email, groups, department, and custom URIs). Your application often expects different property names than the IdP uses, for example givenName in SAML mapped to firstName in your user profile.

Paste a SAML response or assertion, then define one mapping per line as appClaim=attributeName. The tool extracts attribute values in the browser and outputs a JSON object you can compare with your SP middleware mapping rules. Related: SAML Assertion Inspector, SAML Condition Time Validator.

Mapping file format

1. One rule per line: claimKey=samlAttributeName (colon separators are also accepted).
2. Lines starting with # are ignored.
3. Multi-value attributes become JSON arrays; single values stay strings.
4. Use NameID as the SAML name to map the subject identifier.