{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40689,"path":"platform-security/authentication/t_SetUpNameIDPolicy.md","title":"Set up a NameID policy for SAML","bundle":null,"doc_type":null,"release":"australia","body":"\n# Set up a NameID policy for SAML\n\nSet up a NameID policy for SAML. SAML 2.0 requires the IdP to exchange a NameID token with the service provider.\n\n## Before you begin\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## About this task\n\nFor the SAML 2.0 integration the NameID token must map to a particular field in the User table. The integration uses the NameID token's value to determine what user the IdP authenticates.\n\n## Procedure\n\n1.  Browse the IdP metadata to find the `NameIDFormat` element that contains a value of `emailAddress`.\n\n    The value of this element is the default format that the integration uses.\n\n2.  Review other `NameIDFormat` elements to determine if there are formats that match other fields in the User table.\n\n\n"}}