Claims are name/value pairs configured for (and potentially required by) Smart APIs. Claims are configured for each group authorized to access a Smart API. The claims are passed to a Smart API when a user belonging to the group uses the API.
For enumeration type claims, you select from a list of pre-defined values. For string type claims, you can key in a value (as a default) and optionally map the value from an identity provider claim. To map a value from an identity provider claim, you must configure claim mapping in the identity provider. See Add an identity provider for details on mapping claims for an identity provider.
You must configure all Required claims.
-
On the left panel, click Smart APIs .
-
Click the Smart API in the grid to see its details.
-
In the Authorized Groups section, click to select the group.
-
Click EDIT at the top of the section.
-
In the Edit an Authorized Group dialog box, make any of the following changes.
To
Do
Add a claim
Click Add a claim, select the claim, and click ADD.
Set the claim value
In the row for an Enumeration type claim, click the Values list to select a value. For a String type claim click Provide a value (under the Value column) and type a value. At a minimum, you must set a value for all required claims.
Map the claim value from an identity provider claim
For claims that are String type, the value can come from an Identity Provider claim. Click Provide a value (under the Identity Provider Claim column) and type the name of the claim as it is mapped in the identity provider.
Remove a claim
Click to select the claim, then click REMOVE above the list.
-
Click NEXT.
-
Click the Enable Authorized Group checkbox to toggle access for the group.
-
Click NEXT and then FINISH.