Identity provider attributes for OpenID Connect

---
title: Identity provider attributes for OpenID Connect
description: Use the Identity Provider attributes that are received from the OpenID Connect \(OIDC\) from the Identity Provider \(IdP\) as filter criteria for authentication.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/authentication/idp-attributes-oidc.html
release: brazil
product: Authentication
classification: authentication
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Identity provider attributes filter, Filter criteria, Adaptive authentication, Authentication, Access Management]
---

# Identity provider attributes for OpenID Connect

Use the Identity Provider attributes that are received from the OpenID Connect \(OIDC\) from the Identity Provider \(IdP\) as filter criteria for authentication.

You can manually create the IdP attributes based on the claims received as part of the ID token.

**Note:**

-   Identity Provider filter is available with the Zero Trust Access feature. For more information, see [Zero Trust Access \(ZTA\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/session-access.md).
-   IdP attribute filter criteria can be used in [Post-authentication context](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/post-auth-context.md), [Zero Trust Access \(ZTA\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/session-access.md) session relegation, and [Multi-factor Authentication context](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/authentication/mfa-auth-context.md).

Start the configuration by adding the IdP attributes by selecting **New** from the Identity Provider Attributes section and use those attributes for Adaptive Authentication by setting it to `true`.

\[Omitted image "idp-attribute-oidc.png"\] Alt text: IdP Attributes for OIDC

The **RiskFactor** defined in the OIDC configuration in the Identity Provider Attributes is from the ID token claims. This value can be an existing claim or custom claim as configured in the IdP side. Use this claim in various authentication contexts to customize and control the login behavior of users.

The **Identity Provider Attributes** are displayed with the following details:

<table id="table_tz3_bww_vnb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Name

</td><td>

Attribute name that is provided by the Identity Provider.

</td></tr><tr><td>

Display Name

</td><td>

Display Name is the detailed name that is used for the filter criteria.**Note:** You can provide a readable name as a Display Name, in some cases the Display Name provided by the Identity Providers are lengthy and not readable.

</td></tr><tr><td>

Default Value

</td><td>

Default value is used for filter criteria evaluation in case the attribute is missing in the SAML response.

</td></tr><tr><td>

Use in Adaptive Authentication

</td><td>

Option to use the Attribute in the Adaptive Authentication.

</td></tr></tbody>
</table>**Note:** Attributes that are populated from Azure IdP have name and display name limited in length.

You can also add new attributes by selecting **New** in the **Identity Providers Attributes** section.

If the Use in Adaptive Authentication is set to true, then the selected attribute is added as filter criteria in the Generic Filter Criteria. For example, **risk\_score** set to `true`. The Generic Filter Criteria page has a new filter created.