SSO SAML Attributes
Your IDP sends member information to MD Live as attributes in the SAML2 assertion. Each client uses one eligibility option and one registration mode, and each combination has its own attribute page.
Find Your Attributes
Section titled “Find Your Attributes”| Eligibility Option | Including Registration | Seamless SSO |
|---|---|---|
| Real-Time Eligibility | Real-Time + Including Registration | Real-Time + Seamless SSO |
| Preloaded Eligibility | Preloaded + Including Registration | Preloaded + Seamless SSO |
| No Eligibility (DTC) | DTC + Including Registration | DTC + Seamless SSO |
| DTC EAP Member | DTC EAP + Including Registration | Not supported |
Attribute Name Formats
Section titled “Attribute Name Formats”These formats apply to every eligibility option.
| Attribute Name Format | Supported |
|---|---|
urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified |
Yes |
urn:oasis:names:tc:SAML:2.0:attrname-format:uri |
Yes |
urn:oasis:names:tc:SAML:2.0:attrname-format:basic |
Yes |
Value Rules
Section titled “Value Rules”- Attribute values are case-insensitive, except
relationshipandstate, which are case-sensitive. - Dates use the
DD-MM-YYYYformat. - Seamless SSO has no SSO registration page, so the contact and address attributes (
phone,email,address1,city,stateandzip) are required.