PingOne Platform APIs

Identity Provider Attributes

When defining an external identity provider resource, user attributes from the external identity provider are mapped to PingOne user attributes. The mapping attribute placeholder value must be expressed using the following syntax in the request body:

${providerAttributes.<IdP attribute name>}

For example, the request body for the Facebook-to-PingOne email-to-email mapping looks like this, with the value attribute showing the Facebook email attribute expressed using the placeholder syntax:

{
    "name": "email",
    "update": "EMPTY_ONLY",
    "value": "${providerAttributes.email}"
}

For external identity providers that pass in attributes in JSON structure (all external providers except SAML), the syntax for mapping attributes that use JSON dot notation, such as name.family, must use square brackets and single quotes around the attribute name:

{
    "name": "lastName",
    "update": "EMPTY_ONLY",
    "value": "${providerAttributes['name.family']}"
}