SAML Map Profile Info

@Peach379 

Yes, it is possible to map additional user profile information, such as job title, company, and address, through SAML mapping. By leveraging SAML attribute mapping, you can pass additional user attributes from your Identity Provider (IdP) to DocuSign, and these attributes can be used to populate user profiles within DocuSign.

It will depend on the IdP.  If you are using Okta, you can define custom attributes in the "Attributes" section and map these attributes to DocuSign fields. Similarly, for Azure AD, you can add custom claims in the SAML token attributes section and map these to the required fields in DocuSign.

@JohnSantos 

We are using Okta.  On the Okta side I know how to setup attributes and define them in the DocuSign app.  I’m just not seeing what they need to map to on the DocuSign side.  The only options I see on the Config tab for my Identity Provider in DocuSign are:  givenname, surname, emailaddress, nameid, accountid, permissionprofileid, clmpermissionprofileid, genpermissionprofileid (Salesforce addon), and language.  Are there additional attributes available that just aren’t listed?  

@Peach379 

Do you see the option to add Custom Attributes in DocuSign under the IdP Configuration? 

@JohnSantos 

I do, but I don’t see an attribute in the drop down screaming “job title”
 

@JohnSantos Shoot.  I was hoping there was just a trick I was unaware of.  Thank you for responding so quickly!  

Hi @Peach379,

I hope you are doing well.

I would like to confirm if you were able to solve your issue by utilizing the solution that was suggested or if the information that was provided was useful.

If so, please mark it as the best answer by clicking “Select as Best” to make it easier for other users to find.

Otherwise, feel free to let me know and I will gladly help you address the situation as soon as possible.

Best regards,

Christopher | Docusign Community Moderator

"Select as Best" below if you find the answer a valid solution to your issue.

Are there any further updates on this? It feels like a big part of SAML is missing by not mapping job title and company from our IDP.

Hello ​@JohnSantos,

it seems to me that there is no automated way to ensure all users have their current image also available @ DocuSign.

As discussed in this thread, using SAML for keeping the image up to date is not possible.

The API endpoint (updateProfileImage | REST API | Docusign) mentions

Note: Users can only access their own information. A user, even one with Admin rights, cannot access another user's settings.

So using the API for updating the images for every user also does not work either.

Is that correct or is there another approach that could be used?