To send Jamf Connect user information to create a local account, you must confirm that the attribute values (also known as claims) sent in a SAML token from your identity provider (IdP) contain the correct values. On macOS, the following user values are needed to create a local account:
- Account name —The username that macOS uses to keep track of files and information on Mac computers. This name is also known as the short name (e.g., samantha.johnson).
- Full name —The user's first and last name (e.g., Samantha Johnson)
Keep the following in mind when mapping SAML attributes:
SAML attribute names, values, and default claims in a token vary by IdP.
Most ldPs allow you to customize attributes and claims to suit your configuration needs.
Using a SAML decoder can help you examine the contents of a SAML token for user claims.
Attribute values in email format can also be used for an account name. If detected, Jamf Connect will automatically use all characters preceding the
@symbol of the email as a macOS local account name.