# Debugging mapping for a SAMLp identity provider

**URL:** <https://community.auth0.com/t/debugging-mapping-for-a-samlp-identity-provider/9518>\
**Category:** Get Help\
**Tags:** samlp\
**Created:** [February 16, 2018, 2:22pm UTC](https://community.auth0.com/t/debugging-mapping-for-a-samlp-identity-provider/9518 "2018-02-16T14:22:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sgronblo](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@sgronblo](https://community.auth0.com/u/sgronblo)\
**Post date:** [February 16, 2018, 2:22pm UTC](https://community.auth0.com/t/debugging-mapping-for-a-samlp-identity-provider/9518/1 "2018-02-16T14:22:33Z")

</div>

The service we are working on is integrating with a SAMLP provider.  
The integration works fine when pressing the play button to “Try” the integration.  
However, the user profile shown contains a lot of attributes that have cryptic names like “urn:oid:2:5:4:4”. We would like to use the “Mappings” setting to specify that “urn:oid:2:5:4:4” should be mapped to “family\_name”.

I created a test mapping that contains the following key/value pair:

```auto
{
  ...other attributes,
  "family_name": "urn:oid:2:5:4:4"
}

```

However when going to the “Rules” page and clicking “Try all rules with…” and then choosing the SAMLP provider in question, we end up with the same end profile. In other words the expected attribute “urn:oid:2:5:4:4” has not been mapped to “family\_name”.

What could be going wrong?  
Is there some way I can debug what the value of the “incoming\_saml\_attribute” in the mapping should be?

---

<div class="post-metadata">

**Author:** ![richard.dowinton](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/richard.dowinton/32/16150_2.png) [@richard.dowinton](https://community.auth0.com/u/richard.dowinton)\
**Post date:** [March 5, 2018, 11:58am UTC](https://community.auth0.com/t/debugging-mapping-for-a-samlp-identity-provider/9518/2 "2018-03-05T11:58:36Z")

</div>

Are you able to share the SAMLResponse from the identity provider? It would be useful to see the full assertion.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [July 25, 2019, 11:03am UTC](https://community.auth0.com/t/debugging-mapping-for-a-samlp-identity-provider/9518/3 "2019-07-25T11:03:42Z")

</div>