> ## Documentation Index
> Fetch the complete documentation index at: https://docs.anny.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Attribute Mapping

> Assign user properties from your identity provider to anny communities so members are auto-joined to the right booking areas.

Attribute mapping is only possible in combination with an active single sign-on (SSO). After activating SSO, the desired attributes or groups can be released through the SSO application (e.g. Entra ID, Shibboleth, SAML2). When a user signs in, we then receive the attribute information in addition to the name and email address.

Examples: attribute: Department 01, group: IT-DEV, status: Student / Staff

Test which attributes and groups are passed along through your SSO sign-in. You can view this under [*SSO & Security*](https://app.anny.co/organization/settings/sso?o=) *- Load my attribute data*.

# What is attribute mapping?

With attribute mapping, you can assign user properties from your IdP (user management) to anny communities. This way, members can automatically be added (auto-join) to their respective internal booking areas (communities).

**Where do I make the setting?**

1. Click your **account settings**
2. Select the ***SSO & Security*** section
3. Scroll down to ***Attribute Mapping***
4. Click ***Add mapping***

You can assign **10 different attributes** in total. The assignment to a community is used most often.

* Communities
* Roles
* Profile picture
* Language
* Login allowed
* Identifier
* Email
* Last name
* First name
* Display name

![Attribute mapping overview](https://downloads.intercomcdn.eu/i/o/niegcmk9/65658098/5da1ec4e09d062591f7cb8487671/SCR-20250919-kgsx.png?expires=1784813400\&signature=bda10c40857823648185294eef4fff9d7c3d6770d5c41df7aa158cbe9dc5bd93\&req=1tBpwFD6pT9k2hL085ZhoafkGK8xoK5aheyceWhdHfmXcFwmEqmYml5LFQ0t%0A9Ls3q8AIZTAfySfH%0A)

## Create a rule

1. Click Attribute Mapping and select Community
2. Click Rule to create a new rule
3. Enter the value of the group or attribute in the condition and define the community the users should be added to. Example M365 Entra ID groups: If [http://schemas.microsoft.com/......../identity/claims/\*\*groups](http://schemas.microsoft.com/......../identity/claims/**groups)\*\* contains (array): **gruppe\_dev** Then anny community **Dev Team Office** Example Shibboleth: If: **urn:oid:xxxx** contains (array): **Student** Then anny community **Students Wave University**
4. Save your entries

<Warning>
  Entering the values for group names and value is case sensitive and must exactly match the spelling passed by the IdP. The exact spelling can be viewed under 'Load my attribute data'.
</Warning>

Are there **multiple values** that belong to a specific group of people? The **system runs through all rules**. Whenever a rule matches, that value is applied.

<AccordionGroup>
  <Accordion title="Company example">
    A person belongs to a department (e.g. Sales) within a company. As a user in anny, they should therefore automatically be added to the communities "Sales and Marketing", "Retail", and also "Company".
  </Accordion>

  <Accordion title="University example">
    A person belongs to a specific degree program (e.g. Philosophy Teaching) within a university. As a user in anny, they should therefore automatically be added to the community "Philosophy Teaching", but also to the communities "Faculty of Philosophy" and "Teststadt University".
  </Accordion>
</AccordionGroup>

![Rule example](https://downloads.intercomcdn.eu/i/o/3054005/1505363c191d0ba34aa62888/liad.png?expires=1784813400\&signature=67b7d817bb64f8eebf3f79cb5d3e226c9f6716b70d10f63f2d6e6c585dccebfb\&req=09VqwVj6qXsp0xr0v9tnrjNBr9YDj3Tb67qpq5K8j70YxWtDzrNqnOLT4MUQ%0ANPiFP5VwiedljlI%3D%0A)

## Add all users of your company (SSO)

Create a new rule for community mapping and then delete the condition. Select the community you want all users of your company to be assigned to.

![Add all users](https://downloads.intercomcdn.eu/i/o/11354975/5af9cdb4276c591a47318f1c/chrome-capture-2024-2-11.gif?expires=1784813400\&signature=df2e8335119fd072dbe1604fe3b2d1713b2886a6037b3bad5be7b35e952652e2\&req=0dRswFzzqzJk2hL085ZhoavwFlgBjEn3V0Q2IPnm90a7GWUkeWQm%2FN2j55OH%0AlQi%2FOTVepD9CHI%2BL%0A)

Now all users of your SSO are added to the desired community without any filter.

## Technical details of the assignment

| Term                      | Explanation                                                                                  | Example                                                                                |
| ------------------------- | -------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- |
| Equals                    | An exact match of values between two elements or attributes.                                 | When the name "John" exactly matches "John".                                           |
| Does not equal            | The values of two elements or attributes are not identical.                                  |                                                                                        |
| Is empty                  | A specific attribute or group has no assigned or existing value.                             | When the attribute "Team" has no value.                                                |
| Is not empty              | A specific attribute or group has an assigned or existing value.                             |                                                                                        |
| Contains (string)         | A specific character string (string) is present in a larger text field or string.            | When the word "Sales" is contained in "Marketing Operations and Sales Team Analytics". |
| Does not contain (string) | A specific character string (string) is not present in a larger text field or string.        |                                                                                        |
| Contains (array)          | A specific element or value is present in an array (an ordered group or list of values).     | When the number "3" is contained in the array \[1,2,3,4,5].                            |
| Does not contain (array)  | A specific element or value is not present in an array (an ordered group or list of values). |                                                                                        |

<Tip>
  **Pro tip:** If there are users who belong to multiple groups in M365, the ***group*** ***attribute*** is an ***array***. That means you should use the "***contains (array)***" operator instead of "***equals***".
</Tip>
