SCIM Attribute Mapping
Attribute mapping defines how user and group data are synchronized between your Identity Provider (IdP) and FortiPhish via SCIM 2.0.
User attributes
The following user attributes are required for successful user provisioning.
| FortiPhish Attribute | Matching Precedence | Description |
|---|---|---|
| userName | 1 | Primary Identifier (Matching Key). |
| active | Required for user lifecycle management (enabling/disabling). | |
| displayName | The user's full display name. | |
| title | The user's job title or role. | |
| emails[type eq "work"].value | User's email address. | |
| name.givenName | User's first name. | |
| name.familyName | User's last name. | |
| addresses[type eq "work"].formatted | User's office location. | |
| urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:employeeNumber | The user's organizational employee ID. | |
| urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:department | The user's department or organizational unit. | |
| urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:manager | The user's manager. |
Group Attributes
The following group attributes are required for successful group provisioning.
| FortiPhish Attribute | Matching Precedence | Description |
|---|---|---|
| externalId | 1 | Primary Identifier (Matching Key). |
| displayName | The name of the group. | |
| members | The list of user accounts belonging to this group. |