Data Source Attributes Value Provider

The Data Source attributes value provider retrieves attributes from external data sources configured in the system. This provider connects to databases, REST APIs, or other data repositories to fetch user attributes, enabling integration with existing identity systems and external attribute sources.

The Data Source a provider queries configured data sources to retrieve user attributes at assertion issuance time. This enables dynamic attribute retrieval from authoritative systems without duplicating data or requiring manual synchronization.

Use Cases#

The Data Source attributes value provider enables integration with external attribute sources and legacy systems.

Common use cases include:

  • Legacy System Integration: Retrieve user attributes from existing databases or LDAP directories without migrating data to the Curity Identity Server
  • Centralized Attribute Management: Fetch attributes from centralized systems of record that multiple applications share, ensuring consistency across the organization
  • Dynamic Attribute Lookup: Query external APIs or services at assertion issuance time to include real-time data like account balances, subscription status, or permissions
  • Hybrid Identity: Combine attributes from multiple data sources in assertion, enabling gradual migration from legacy systems to modern identity infrastructure
  • Compliance and Audit: Retrieve attributes from compliance systems or data warehouses that maintain authoritative records for regulatory purposes

Getting Started#

To create a Data Source attributes value provider, sign in to the Admin UI and navigate to to Profiles → SAML Profile → Attributes → Attribute Value Providers. Select + New Attribute Value Provider, give the provider a unique identifier and choose the Data Source Attribute Provider type.

New data source Attribute Value Provider configuration in Admin UI
New attribute value provider for data source in Admin UI. (Admin UI version: 10.6)

The provider queries the selected data source when assertions are issued. The authenticated user’s identifier determines which record to retrieve from the data source.

Data Source Requirements#

The Data Source attributes value provider requires:

  • A configured data source under Facilities → Data Sources
  • Appropriate connectivity between the Curity Identity Server and the external data repository
  • A mechanism to correlate the authenticated user with records in the data source

The Data Source attributes value provider only returns attributes that exist in the external data source. Ensure the data source is properly configured and contains the required user attributes before referencing it in a attributes provider.

For more information on configuring data sources, see Data Sources .

Was this helpful?