Local Account ID Mapping Interface

Provided by SP local account IDs are stored in corresponding web resources at IdP. For details, refer to the Local User Registration in IdP section. The identifiers (account_id) may differ from account login names. In such case, a mapping service should be provided by SP. The service must map account IDs to login names. IdP uses it to display exactly login names in the "selecting account" dialog. To provide the service, SP must be registered with the name_mapping_url parameter that contains URL of the local account ID mapping interface. The interface is used to resolve an account identifier.

Endpoint URL: name_mapping_url

The following schema is used to resolve a local account ID:

1. IdP sends POST request to the endpoint URL containing list of identifiers that should be resolved.

   This list is plain-text web resource with one identifier per line.

2. SP sends response in a plain-text web resource where keys are requested identifiers and values are respective login names.

   The web resource content format is described in the Appendix.