# \[Feature-4637\]idpAttributes Session Property **URL:** \ **Category:** Ignition\ **Tags:** perspective, ignition81\ **Created:** [June 2, 2022, 10:02pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323 "2022-06-02T22:02:10Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![zacht](https://avatars.discourse-cdn.com/v4/letter/z/ea5d25/32.png) [@zacht](https://forum.inductiveautomation.com/u/zacht)\ **Post date:** [June 2, 2022, 10:02pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/1 "2022-06-02T22:02:10Z")
We're using a SAML identity provider (Azure in this case). It would be convenient to get all the information provided by the IdP in one of my Perspective projects. The [user manual](https://docs.inductiveautomation.com/display/DOC81/Session+Properties) suggests that the idpAttributes session property gets me what I'm looking for, but I just get an empty object. This post seems to indicate that idpAttributes isn't supported by SAML IdP's: > [@Added Support for OIDC User Info and Token Endpoint Response](https://forum.inductiveautomation.com/t/added-support-for-oidc-user-info-and-token-endpoint-response/37075): > > The 7/25/2020 nightly release of Ignition 8.0.16 introduces first-class support for OIDC IdPs to call the User Info API. Additionally, the token endpoint response object is now exposed to user attribute mappers, security level rules, and Perspective sessions. User Info [The OIDC spec defines an HTTP endpoint which may be optionally exposed by IdPs](https://openid.net/specs/openid-connect-core-1_0.html#UserInfo). Relying party applications (such as Ignition) may optionally call this endpoint to retrieve additional claims about the authenticated user which may… Is there a way to get the whole SAML object in a perspective project? If idpAttributes doesn't support SAML IdP's, can the documentation be updated to reflect this? ---
**Author:** ![stat](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/stat/32/32530_2.png) [@stat](https://forum.inductiveautomation.com/u/stat)\ **Post date:** [June 3, 2022, 7:50pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/2 "2022-06-03T19:50:25Z")
> The [user manual](https://docs.inductiveautomation.com/display/DOC81/Session+Properties) suggests that the idpAttributes session property gets me what I’m looking for, but I just get an empty object. Are you viewing the idpAttributes property within the Designer? From the manual for the idpAttributes property: > Note: The Designer does not authenticate against identity providers in Ignition 8.0, so this object will > always appear empty in the designer. Use the Test Login page to determine the shape of this property, or use a simple binding to something visual (i.e. a label) display and parse the results while developing your project. Is the property empty if you attempt to print its value or display its value through a property binding on a label component within a session in the browser? ---
**Author:** ![zacht](https://avatars.discourse-cdn.com/v4/letter/z/ea5d25/32.png) [@zacht](https://forum.inductiveautomation.com/u/zacht)\ **Post date:** [June 6, 2022, 2:38pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/3 "2022-06-06T14:38:25Z")
Here is the binding I’m using. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/9/7/973486a6c25a8369b66310baacac0d4f68960df0.png) Viewing in the browser ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/e/0e432474eb2aaeae6b180839eeee88837d6e233e.png) ---
**Author:** ![stat](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/stat/32/32530_2.png) [@stat](https://forum.inductiveautomation.com/u/stat)\ **Post date:** [June 8, 2022, 4:07pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/4 "2022-06-08T16:07:21Z")
Thank you for testing that out. As you mentioned, currently the idpAttributes property does not support the ability to display SAML Response Document. It does support the OpenID Connect(OIDC) response, which is explained in that forum post you shared. We have a feature request in our queue to include the SAML response document, but there is no timeline for when this will be completed. When the feature is completed it will show up in the nightly change logs with the number 4637. > If idpAttributes doesn’t support SAML IdP’s, can the documentation be updated to reflect this? I can reach out to our IA manual team to ask them to update this. ---
**Author:** ![zacht](https://avatars.discourse-cdn.com/v4/letter/z/ea5d25/32.png) [@zacht](https://forum.inductiveautomation.com/u/zacht)\ **Post date:** [June 8, 2022, 4:12pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/5 "2022-06-08T16:12:26Z")
Thanks for the confirmation. I’ll keep an eye out for 4637. ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [May 15, 2024, 3:14pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/6 "2024-05-15T15:14:23Z")
The SAML Response XML is now available as a Perspective session prop starting with version `8.1.41-SNAPSHOT-b20240514` See: [Nightly 8.1 Changelogs - 2024 - #82 by system](https://forum.inductiveautomation.com/t/nightly-8-1-changelogs-2024/83608/82) ---
**Author:** ![cross](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cross/32/76508_2.png) [@cross](https://forum.inductiveautomation.com/u/cross)\ **Post date:** [June 20, 2024, 5:55pm UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/7 "2024-06-20T17:55:58Z")
This has been resolved with Ignition 8.1.42, released today ---
**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\ **Post date:** [June 24, 2024, 8:13am UTC](https://forum.inductiveautomation.com/t/feature-4637-idpattributes-session-property/60323/8 "2024-06-24T08:13:23Z")
Hello, Just tested with Azure SAML, working fine. How is the best way to extract an specific attribute from this idpAttributes thing? In the gateway I use: ```python /saml2p:Response/saml2:Assertion/saml2:AttributeStatement/saml2:Attribute[@Name="emailaddress"]/saml2:AttributeValue/text() ``` How can I extract other attributes with this in a binding? ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/d/f/dfd89c640a9d09315cb20521fa1a6c4fa10ef7e2.png) Thanks!