Mapping IFS roles to Grid roles

The IFS roles that are provided in the Security Role claim in the Assertion are parsed by the SAML Session Provider during authentication and mapped against Grid roles. See Defining role mappings for information about how to configure role mappings.

For on-premise deployments, the SAML Session Provider adds a Grid role mapping when it is deployed. The IFS role GRID-SystemAdministrator is mapped to the Grid role grid-admin. This process enables assignment to the grid-admin role for users in IFS.