If you require special configurations for your single sign-on (SSO) instance, use the Advanced tab in Self Service SAML.
The advanced settings for Self-Service SAML require advanced familiarity with SAML protocols.
In the Advanced tab, you can configure the following settings:
Setting | Type | Description |
Name ID Format | Dropdown list | Options include Email Address, Transient, or Unspecified. If you use a value other than Email Address, you must specify an Attribute Mapping value. |
Attribute Mapping | Text | If the Name ID Format is set to use a value other than Email Address, specify the metadata attribute containing the email address Anaplan uses for validation. Note: If the Name ID Format value is Email Address, don't change the default Attribute Mapping value. |
Force Authn | Toggle | When enabled, the identity provider (IdP) must authenticate the user again if required during the session, and even if the user is already authenticated. |
AllowCreate | Toggle | Controls how the authentication process responds when a user doesn't exist in the identity provider (IdP) but exists in the service provider's site.
By default, this setting is disabled. |
Comparison | Dropdown list | Specifies the level of assurance. Options include Exact, Better, or None. The default value is Exact. |
Context Class | Text | Defines the level of protection to associate with the Comparison value. For details, see SAML protocols. |