Cmdlets for PingOne

Build 25.0.9434

ApplicationAttributeMappings

The attribute mappings configured for the application.

Table-Specific Information

We recommend using the built-in Client Application Developer role to read and write data for this table.

SELECT

Reading data from this table requires Read Application/applications:read:application permission.

To execute SELECT statements on this table, the ApplicationId column must be specified in the criteria as shown in the examples below:

SELECT * FROM Administrators.ApplicationAttributeMappings WHERE ApplicationId = '8f2c6a33-1f7f-458e-8b58-f92507742293';
SELECT * FROM Administrators.ApplicationAttributeMappings WHERE ApplicationId IN ('8f2c6a33-1f7f-458e-8b58-f92507742293', '4441de0a-e4f2-47da-a217-545955eb23a5');
SELECT * FROM Administrators.ApplicationAttributeMappings WHERE ApplicationId = '8f2c6a33-1f7f-458e-8b58-f92507742293' AND Id = 'ada8a79b-262b-4b1f-bec9-a123e6179e21';

The cmdlet uses the PingOne Platform API to process WHERE clause conditions built with the following columns and operators.

  • ApplicationId supports the following operators: =, IN.
  • Id supports the following operators: =, IN.

All other filters are processed client-side within the cmdlet.

INSERT

Creating data in this table requires Create Application/applications:create:application permission.

Refer to the query example below:

INSERT INTO Administrators.ApplicationAttributeMappings (ApplicationId, AttributeName, AttributeValue, OIDCScopes, Required, IncludeInIDToken, IncludeInUserInfo) VALUES ('8f2c6a33-1f7f-458e-8b58-f92507742293', 'email', '${user.email}', '8f2c6a33-1f7f-458e-8b58-f92507742293', true, true, true)

UPDATE

Updating data in this table requires Update Application/applications:update:application permission.

Refer to the query example below:

UPDATE Administrators.ApplicationAttributeMappings SET Required = false WHERE ApplicationId = '8f2c6a33-1f7f-458e-8b58-f92507742293' AND Id = 'ada8a79b-262b-4b1f-bec9-a123e6179e21'

DELETE

Deleting data from this table requires Delete Application/applications:delete:application permission.

Refer to the query example below:

DELETE FROM ApplicationAttributeMappings WHERE ApplicationId = '8f2c6a33-1f7f-458e-8b58-f92507742293' AND Id = 'ada8a79b-262b-4b1f-bec9-a123e6179e21'

Columns

Name Type ReadOnly References Description
Id [KEY] String True

The attribute mapping identifier (UUID).

AttributeName String False

The name of the attribute.

AttributeValue String False

The string constants or expression for mapping the attribute name against a specific source. The expression format is: ${SOURCE.ATTRIBUTE}. The only supported source is user (for example, ${user.id}).

Type String True

The mapping type of the attribute. Possible values are: 'CORE', 'SCOPE', and 'CUSTOM'.

ApplicationId String False Applications.Id

The identifier (UUID) of the application to which the attribute mapping belongs.

OIDCScopes String False

The OIDC resource scope identifiers (UUID) that this attribute mapping is available for exclusively. If 'null' or empty, the response includes this mapping in the 'openid' scope.

Required Boolean False

Boolean value indicating whether a non-empty value is required for the attribute in this attribute mapping.

IncludeInIDToken Boolean False

Boolean value indicating whether the attribute mapping should be available in the ID Token. This applies only when the application's protocol is 'OPENID_CONNECT'.

IncludeInUserInfo Boolean False

Boolean value indicating whether the attribute mapping should be available through the '/as/userinfo' endpoint. This applies only when the application's protocol is 'OPENID_CONNECT'.

CreatedAt Datetime True

The time at which the attribute mapping was created.

UpdatedAt Datetime True

The time at which the attribute mapping was last updated.

Copyright (c) 2025 CData Software, Inc. - All rights reserved.
Build 25.0.9434