# SAML how do I map Administrator profile?

**URL:** <https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798>\
**Category:** Pydio Cells\
**Created:** [September 29, 2025, 6:03pm UTC](https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798 "2025-09-29T18:03:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![erpadmin](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/erpadmin/32/3288_2.png) [@erpadmin](https://forum.pydio.com/u/erpadmin)\
**Post date:** [September 29, 2025, 6:03pm UTC](https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798/1 "2025-09-29T18:03:04Z")

</div>

In the SAML trace role is confirmed as “pydio\_admin”

 ![image](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/2X/d/dbb9b705cc621e53763743d4b342846319f78c80.png)

In the mapping config I have (I have tried Administrator, administrator, and admin)

 ![image](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/2X/d/d035a7ff977c9436ee3942c9eb94388dae743f52.png)

Left attribute full value: [http://schemas.microsoft.com/ws/2008/06/identity/claims/role](http://schemas.microsoft.com/ws/2008/06/identity/claims/role)

Considerations:

Without this mapping rule in place and testing with a user in the admin group (EntraID side), the sign-on and apps works fine and the user is given profile “Standard”.

With this mapping rule, sign-on works, but app gives unauthorized error. When checking the user account that is created it is missing a Profile value (thus no permissions are assigned). (A new user not in the admin group also works fine.)

I cannot find documentation that covers SAML mapping configuration for Pydio Cells. I currently have a time limited trial of Enterprise edition. Hopefully I can resolve this rather quickly.

---

<div class="post-metadata">

**Author:** ![erpadmin](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/erpadmin/32/3288_2.png) [@erpadmin](https://forum.pydio.com/u/erpadmin)\
**Post date:** [September 29, 2025, 6:58pm UTC](https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798/2 "2025-09-29T18:58:17Z")

</div>

After further review, the Mapping looks like it is actually working since the user card says “Administrator - 3 roles”. The problem, for whatever reason is that the “Profile” field is not getting populated. See screenshots below.

 ![s1](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/2X/5/5c1d7fd3949774c1972d125ce21b0386715a76c9.png)

 ![s2](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/2X/c/c91c25ddd4bb5531c4e953024590121191619b3d.png)

---

<div class="post-metadata">

**Author:** ![c12simple](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/c12simple/32/90_2.png) [@c12simple](https://forum.pydio.com/u/c12simple)\
**Post date:** [September 30, 2025, 9:11am UTC](https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798/3 "2025-09-30T09:11:32Z")

</div>

Hello @erpadmin

Thanks for raising a question. This is an enterprise feature. We will contact you via ‘enterprise’ channel 😉

---

<div class="post-metadata">

**Author:** ![erpadmin](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/erpadmin/32/3288_2.png) [@erpadmin](https://forum.pydio.com/u/erpadmin)\
**Post date:** [September 30, 2025, 5:38pm UTC](https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798/4 "2025-09-30T17:38:56Z")

</div>

Solution is:

```auto
Left Attribute: keep claims/role as is

```

```auto
Filter Rule: <blank>

```

```auto
Right Attribute: Profile

```

```go
Custom Value: {{if eq (lower .LeftValue) “pydio_admin”}}admin{{else}}standard{{end}}

```

replace pydio\_admin with your specific role claim value. the screenshots capture the information needed to assist

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex032/uploads/pydio/original/2X/6/61f19fa52ec15fd4250db51aea351adba0e831fd.png) [@system](https://forum.pydio.com/u/system)\
**Post date:** [December 19, 2025, 5:04pm UTC](https://forum.pydio.com/t/saml-how-do-i-map-administrator-profile/7798/6 "2025-12-19T17:04:23Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.