{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40673,"path":"platform-security/authentication/t_MatchUserTableFieldToNameIDToken.md","title":"Determine what User table field matches the NameID token","bundle":null,"doc_type":null,"release":"australia","body":"\n# Determine what User table field matches the NameID token\n\nIdentity providers specify what format the `NameID` token has.\n\n## Before you begin\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## About this task\n\nSetting up SAML 2.0 requires selecting a field from the User table that matches the format of the `NameID` token. Typically, IdPs offer the option to use an email address as the `NameID` token. Since the User table contains an email field, this field is a logical choice for use as a `NameID` token. To use another field from the User table as the `NameID` token, first verify that the IdP offers a `NameID` format that matches the value of a User table field. This may require adding the field to the User table.\n\n## Procedure\n\n1.  Compare the available formats in the IdP's `NameIDFormat` element to fields in the User table.\n\n2.  Select a `NameID` format where there is a matching value in the User table.\n\n3.  In the The User table field to match with the Subject's NameID element in the SAMLResponse field, enter the name of the User table field to search for matching values in the `NameID` token.\n\n    By default, the integration uses the email field.\n\n\n"}}