Added more details about property mapping

This commit is contained in:
Dewi Roberts
2025-05-09 13:47:24 +01:00
parent bbc98d55a7
commit 34aa2b7829

View File

@ -58,9 +58,15 @@ Ironclad requires a first and last name for each user. By default authentik only
- **Application**: provide a descriptive name, an optional group for the type of application, the policy engine mode, and optional UI settings.
- **Choose a Provider type**: select **SAML Provider** as the provider type.
- **Configure the Provider**: provide a name (or accept the auto-provided name), the authorization flow to use for this provider, and the following required configurations.
- Temporarily set the **ACS URL** to `https://temp.temp`
- Set the **Audience** to `https://ironcladapp.com`
- Under **Advanced protocol settings**, set an available signing certificate, and select
- Under **Advanced protocol settings**:
- Set an available signing certificate.
- **Scopes**:
- Remove `authentik default OAuth Mapping: OpenID 'profile'` from **Selected Scopes**.
- Add the scope that you created in the previous section (e.g. `Ironclad Profile Scope`) to **Selected Scopes**.
- **Configure Bindings** _(optional)_: you can create a [binding](/docs/add-secure-apps/flows-stages/bindings/) (policy, group, or user) to manage the listing and access to applications on a user's **My applications** page.
3. Click **Submit** to save the new application and provider.