Mapping SAML Attributes to Users
You can map existing SAML user or group attributes to SAP Analytics Cloud user profiles.
SAP Analytics Cloud is running on an SAP data center.Determine which environment SAP Analytics Cloud is hosted in by inspecting your SAP Analytics Cloud URL:
- A single-digit number, for example us1 or jp1, indicates an SAP data center.
- A two-digit number, for example eu10 or us30, indicates a non-SAP data center.
If SAP Analytics Cloud is running on a non-SAP data center, you must do the user mapping in your SAML identity provider, and the steps below do not apply. For more information, see Step 6 in Enabling a Custom SAML Identity Provider.
When you map SAML attributes to users, you'll need your Subaccount (S-User) details. Have these ready before you start. To find your S-User information, in SAP Analytics Cloud go to .
You or the owner of your organization’s S-User account must submit an SAP Product Support Incident using the component: LOD-ANA-BI. In the support ticket, indicate that you want to map SAML attributes to user profiles, and include your SAP Analytics Cloud tenant URL.
You have configured your system to authenticate users against a custom SAML Identity Provider (IdP). You are logged on with a SAML account that is assigned an administrative role in SAP Analytics Cloud. And your cust²²om SAML IdP is configured to return one or more SAML user attributes in the SAML assertions that are issued to authenticated SAML users.
- First Name
- Last Name
- Display Name
- Job Title
- Functional Area
- Office Location
- Date Formatting
- Number Formatting
- On the User page of the Security area, select (Map SAML User Properties).
In the Map
SAML Attributes dialog,
The list of SAML attributes is populated with up to three available mappings. Expand the list beside the selected attribute to change it.
If you are connecting to an SAP HANA system, you can click properties found and all SAML attributes detected will be added to the list automatically.
- Select (New Mapping Definition) to add additional SAML Attributes if necessary.
- Select a Target Property for each SAML attribute.
- Select Save.
A confirmation email will be sent to the email address linked to the new mapping.
As long as a user has not logged on to the system with the new information, the SAML mapping will appear in pending state on the Users list.