Skip to main content
Zenzap checks for role information in the SAML assertion to automatically assign user roles.

​
Attribute Name

Configure a role attribute in your identity provider’s SAML assertion. If no role attribute is found, the user’s role remains unchanged.

​
Expected Values

ValueEffect
adminUser gets Admin role
userUser gets Member role
(anything else)No change
Values are case-insensitive.

​
Behavior

  • If role attribute exists with admin → user becomes Admin
  • If role attribute exists with user → user becomes Member
  • If role attribute exists but value isn’t recognized → no change
  • If no role attribute is present → no change