Account Manager Attribute Value Provider

The Account Manager attributes provider retrieves attributes by querying the configured account manager for the authenticated user’s account data. The available attributes depend on the account manager configuration and the schema defined in the connected user store.

Use Cases#

The Account Manager attributes value provider enables assertion issuance workflows that require user profile data from centralized user stores.

Common use cases include:

• User Profile Attributes: Include standard user attributes like email, phone number, name, and address in ID assertions and access assertions
• Custom Attributes: Add organization-specific user attributes stored in the account manager to assertions for business logic
• Role and Group Information: Retrieve user roles or group memberships from the user store for authorization decisions
• Dynamic Attribute Lookup: Fetch current user data at assertion issuance time to ensure assertions contain up-to-date information
• Multi-Source Integration: Combine account manager attributes with other attributes providers for comprehensive assertion data

For detailed guidance on user data management and assertion design patterns, visit the User Management Profile .

Getting Started#

To create an Account Manager attributes value provider, sign in to the Admin UI, create a SAML profile if there isn’t one, and navigate to

Select + New Attribute Value Provider, give the provider a unique identifier and select the Account Manager type.

Select the Account Manager that contains the user data, and toggle the desired options.

The provider retrieves attributes from the selected account manager when assertions are issued. The authenticated user’s identifier determines which account record to query.

For more information on configuring account managers, see Account Managers .