# OpenAM Administration Guide
12.3. Configuring Identity Providers

Sidebar | Prev | Up | Next

### 12.3.2. Hints for Assertion Processing

Use the following hints to adjust settings on the Assertion Processing tab page.

Attribute Mapper

Attribute Mapper

  Specifies a class that implements the attribute mapping.

  The default implementation attempts to retrieve the mapped attribute values from the user profile first. If the attribute values are not present in the user's profile, then it attempts to retrieve them from the user's session.

  Default: `com.sun.identity.saml2.plugins.DefaultIDPAttributeMapper`

Attribute Map

  Maps SAML attributes to user profile attributes.

  The user profile attributes used here must both be allowed in user profiles, and also be specified for the identity repository. See the Developer's Guide chapter, Customizing Profile Attributes, for instructions on allowing additional attributes in user profiles.

  To specify the list of profile attributes for an LDAP identity repository, login to OpenAM Console as administrator and browse to Access Control > `Realm Name` > Data Stores, and click the data store name to open the configuration page. Scroll down to User Configuration, and edit the LDAP User Attributes list, and then click Save to keep your work.

  The default IDP mapping implementation allows you to add static values in addition to values taken from the user profile. You add a static value by enclosing the profile attribute name in double quotes (`"`), as in the following examples.

  To add a static SAML attribute called `nameID` with a value of `staticNameIDValue` with a name format of `urn:oasis:names:tc:SAML:2.0:attrname-format:uri`, add the following mapping.

      urn:oasis:names:tc:SAML:2.0:attrname-format:uri|nameID="staticNameIDValue"

Account Mapper

Account Mapper

  Specifies a class that implements `AccountMapper` to map remote users to local user profiles.

Local Configuration

Auth URL

  URL where users are redirected to authenticate.

Reverse Proxy URL

  When a reverse proxy is used for SAML endpoints, it is specified here.

External Application Logout URL

  URL to which to send an HTTP POST including all cookies when receiving a logout request. To add a user session property as a POST parameter, include it in the URL query string as a `appsessionproperty` parameter.