How to use discriminator claims for SAML2 or Azure AD authentication methods?

About this article

This article describes how you can further restrict access to Templafy, based on specific user attributes, even if the they reside in the same Identity Provider.

Prerequisites

How to configure discriminator claims for SAML2 or Azure AD authentication methods?

1. Go to Account tab in the left-side menu of the Admin Center
2. Navigate to Authentication tab
3. Click the Edit details button for the Authentication method you want to edit.
4. Scroll down and click to expand the Advanced options to display the advanced settings.
5. Select one of the below discriminator claims in the Discriminator claim name dropdown:
   1. city
   2. companyName
   3. country
   4. department
   5. groups
   6. state
   7. customClaim  (up to 15 custom claims - SAML2 authentication only)
6. Fill in one or more discriminator value(s), use a comma when you want to add multiple values (e.g., country = Germany OR Switzerland OR Austria).
7. Press the Save button to save your settings.

It should be noted that:

Related articles