Hi Kiri.
You can send back the claims via SAML in any format. From there, the OnBase IDP (OnBase 17/18) or Hyland IDP (OnBase Foundation EP1 and higher) can be configured to read the Name attribute from the Attribute Claim(s) in the SAML Response.
For Azure AD, I found this article which might be helpful ...
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-saml-claims-customization
For instance, the following is a portion of a SAML Response ...
<AttributeStatement> <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"> <AttributeValue>John Doe</AttributeValue> </Attribute> <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"> <AttributeValue>jdoe@domain.com</AttributeValue> </Attribute> <Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/role"> <AttributeValue>Scanning Users</AttributeValue> </Attribute></AttributeStatement>
Here you can see the reference to http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name which is the reference to the users full name in the SAML Response.
The following would be the corresponding UserAttributeMappings in the idpconfig.json for the Hyland IDP ...
"UserAttributeMapping": { "username": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", "email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", "realName": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", "group": "http://schemas.microsoft.com/ws/2008/06/identity/claims/role"},
As long at the value is send in the SAML Response and is an Attribute, it can be mapped to OnBase.
Best wishes.
