# AWX SAML Configuration

**URL:** <https://forum.ansible.com/t/awx-saml-configuration/33782>\
**Category:** Ansible Project\
**Tags:** awx\
**Created:** [September 10, 2020, 4:31am UTC](https://forum.ansible.com/t/awx-saml-configuration/33782 "2020-09-10T04:31:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prasad\_Shetty](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/prasad_shetty/32/4913_2.png) [@Prasad\_Shetty](https://forum.ansible.com/u/Prasad_Shetty)\
**Post date:** [September 10, 2020, 4:31am UTC](https://forum.ansible.com/t/awx-saml-configuration/33782/1 "2020-09-10T04:31:35Z")

</div>

Hello Everyone-

I was trying to setup a SAML team map in AWX . I am able to achieve the same using LDAP but in SAML it bit confusing. Could you please help me on the same. If anyone already configured. Please share the real example configuration for my reference.

SAML ORGANIZATION ATTRIBUTE MAPPING  
SAML TEAM MAP  
SAML TEAM ATTRIBUTE MAPPING

---

<div class="post-metadata">

**Author:** ![Raju\_Das](https://avatars.discourse-cdn.com/v4/letter/r/7feea3/32.png) [@Raju\_Das](https://forum.ansible.com/u/Raju_Das)\
**Post date:** [September 10, 2020, 5:20am UTC](https://forum.ansible.com/t/awx-saml-configuration/33782/2 "2020-09-10T05:20:11Z")

</div>

Hi,

Please find Redhat Doc if it helps…

Mapping between organization admins/users and LDAP groups

The org mapping parameters controls what users are placed into what Tower organizations relative to their LDAP group  
memberships. Some things to note:

- Keys are organization names.

- Organizations will be created if not present.

- Values are dictionaries defining the options for each organization’s membership.

- For each organization it is possible to specify what groups are automatically users of the organization and also what  
groups can administer the organization.

Here is an example input for Organization mapping:

```auto
{
    "Test Org": {
        "admins": "CN=Domain Admins,CN=Users,DC=example,DC=com",
        "users": ["CN=Domain Users,CN=Users,DC=example,DC=com"],
        "remove_users" : "True",
        "remove_admins" : "True"
    },
    "Test Org 2": {
        "admins": ["CN=Administrators,CN=Builtin,DC=example,DC=com"],
        "users": "True",
        "remove_users" : "True",
        "remove_admins" : "True"
    }
}

```

---

<div class="post-metadata">

**Author:** ![Prasad\_Shetty](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/prasad_shetty/32/4913_2.png) [@Prasad\_Shetty](https://forum.ansible.com/u/Prasad_Shetty)\
**Post date:** [September 10, 2020, 5:12pm UTC](https://forum.ansible.com/t/awx-saml-configuration/33782/3 "2020-09-10T17:12:49Z")

</div>

Thank you Raju  
I am currently using LDAP mapping and it is working fine.I was looking very specifically SAML mapping options.
