Custom Username Source Support for SAML Assertions (8.0.3)
FortiWeb 8.0.3 adds new options to control how usernames are extracted from SAML assertions in Site Publishing. Administrators can now choose whether FortiWeb retrieves the username from the NameID field or from a specified SAML Attribute, instead of relying on the previously fixed EPPN field. This provides greater flexibility for deployments where the identity provider (IdP) uses different fields or formats to represent the username.
Enhancements
-
A new Custom Username Source option in the SAML Server configuration.
-
Username extraction can now use either the NameID field or a specified SAML Attribute.
-
Built-in support for common NameID and Attribute formats removes the need for IdP-side remapping.
Configuration Updates
FortiWeb 8.0.3 introduces several updates to the SAML Server configuration to support customizable username extraction and improve the overall setup flow. The section previously labeled Identity Provider Metadata has been renamed to Identity Provider, reflecting that the configuration now covers broader IdP settings rather than just metadata upload. This updated layout provides a clearer place to introduce the new controls for selecting how FortiWeb retrieves the username from a SAML assertion.
-
Custom Username Source — Enables the new method for selecting how the username is extracted.
-
Source — Lets you choose whether the username should come from NameID or from a SAML Attribute.
-
Attribute Name — Appears when Attribute is selected and specifies which attribute contains the username.
When the Custom Username Source feature is disabled, FortiWeb continues using its existing username extraction method.