# IdP User Attributes in Vision

**URL:** <https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132>\
**Category:** Ignition\
**Tags:** vision\
**Created:** [October 12, 2022, 6:35pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132 "2022-10-12T18:35:40Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![WKetcham](https://avatars.discourse-cdn.com/v4/letter/w/c57346/32.png) [@WKetcham](https://forum.inductiveautomation.com/u/WKetcham)\
**Post date:** [October 12, 2022, 6:35pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/1 "2022-10-12T18:35:40Z")

</div>

Is there a way to get the user attribute fields, specifically 'First Name', 'Last Name', and 'Email' that are returned from the Identity Provider in the Vision Client?

---

<div class="post-metadata">

**Author:** ![Matthew.gaitan](https://avatars.discourse-cdn.com/v4/letter/m/59ef9b/32.png) [@Matthew.gaitan](https://forum.inductiveautomation.com/u/Matthew.gaitan)\
**Post date:** [October 13, 2022, 4:58pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/2 "2022-10-13T16:58:03Z")

</div>

This is easy to do via scripting

```auto
username = system.tag.readBlocking(['[System]Client/User/Username'])[0].value
user = system.user.getUser('Usersource', username)
contactInfo = {cI.contactType: cI.value for cI in user.getContactInfo()}

print 'First Name:', user.get('firstname')
print 'Last Name:', user.get('lastname')
print 'Email:', contactInfo['email'] if 'email' in contactInfo.keys() else None

```

Just replace `Usersource` on the second line with your user source.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [October 13, 2022, 5:03pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/3 "2022-10-13T17:03:06Z")

</div>

User sources aren't identity providers, though. I don't think we request (or keep track of) metadata like this from identity providers, though I could be wrong.

---

<div class="post-metadata">

**Author:** ![Matthew.gaitan](https://avatars.discourse-cdn.com/v4/letter/m/59ef9b/32.png) [@Matthew.gaitan](https://forum.inductiveautomation.com/u/Matthew.gaitan)\
**Post date:** [October 13, 2022, 5:04pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/4 "2022-10-13T17:04:21Z")

</div>

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/4/845b7e04ea57f507aa570d15a8336de028d58e26.png)  
Rookie mistake. Disregard

I think this is why I was confused.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/b/e/beb0a37366f21ba44e4b72e0ea1a5edf7451cd73.png)

But see now that they want the actual IdP metadata and not the usersource metadata

---

<div class="post-metadata">

**Author:** ![WKetcham](https://avatars.discourse-cdn.com/v4/letter/w/c57346/32.png) [@WKetcham](https://forum.inductiveautomation.com/u/WKetcham)\
**Post date:** [October 13, 2022, 5:18pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/5 "2022-10-13T17:18:41Z")

</div>

[IdP User Attribute Mapping](https://docs.inductiveautomation.com/display/DOC81/User+Attribute+Mapping)

---

<div class="post-metadata">

**Author:** ![WKetcham](https://avatars.discourse-cdn.com/v4/letter/w/c57346/32.png) [@WKetcham](https://forum.inductiveautomation.com/u/WKetcham)\
**Post date:** [October 13, 2022, 5:24pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/6 "2022-10-13T17:24:04Z")

</div>

Matthew,

Thanks for trying to help, but I am trying to get the identity provider metadata as PGriffith suggested.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [October 13, 2022, 5:34pm UTC](https://forum.inductiveautomation.com/t/idp-user-attributes-in-vision/65132/7 "2022-10-13T17:34:42Z")

</div>

Hmm. We should probably expose this in additional client tags or something for IdP logins.

In the meantime, this _might_ get you a `user` object with the details you want, though there may be unintentional side effects:

```python
from com.inductiveautomation.ignition.client.gateway_interface import GatewayConnectionManager

connection = GatewayConnectionManager.getInstance()
challenge = connection.getAuthChallenge()
user = connection.login(system.project.getProjectName(), challenge)
print user

```