How to Add SAML Users with Specific Roles in EloView 4 (EV4)
This article explains how to configure SAML users with specific roles in EloView 4 (EV4). Roles must be defined in both EloView and your Identity Provider (IDP), then passed through the SAML assertion.
Important: Role names in your IDP must match exactly with the roles created in EloView. Mismatched names will be ignored during authentication.
Step 1: Create Custom Roles in EloView
- Navigate to Accounts.
- Select the Roles tab.
- Create the required roles based on your permission needs.
Step 2: Create Matching Roles in Your IDP
The following example uses OneLogin, but the same approach applies to other IDPs.
- Navigate to the Admin Role Creation page.
- Create roles using the exact same names as defined in EloView.
- Associate the EloView application with the new roles.
- Assign users to the appropriate roles.
Step 3: Configure SAML Attributes
- Open the EloView application configuration in your IDP.
- Go to the Parameters section.
- Add a new attribute:
- Name:
roles(must be lowercase) - Value: Map to User Roles
- Name:
- Enable Include in SAML assertion.
- Save the configuration.
Warning: If the
roles attribute is not included in the SAML assertion, EloView will not assign any custom permissions.Step 4: Assign the EloView Application to Users
- Navigate to User configuration in your IDP.
- Add the EloView application to the user.
- Verify that the SAML parameters include the user’s assigned roles.
Best Practices:
- Users can have multiple roles. Roles are sent separated by a semicolon (
;). - Undefined roles in EloView are ignored.
- If no valid roles are assigned, the user defaults to Viewer permissions.
Default Role Mapping (Optional)
If you are not using custom roles, you can map users directly to EloView system roles:
- Admin
- Registered User
- Viewer
Please report any broken links by emailing support@elotouch.com and include a link to the knowledge article