GuidesAPI ReferenceDiscussions
HomeGuidesAPI ReferenceChangelogDiscussions
GuidesAPI ReferenceDiscussions

## Identity Provider Configuration

## Issuer Entity ID

URL that uniquely identifies your SAML identity provider. Please provide this value to your Blend project contact. SAML assertions sent to Blend must match this value in the `<saml:Issuer>` attribute of SAML assertions.

`<saml:Issuer>{issuer}</saml:Issuer>`

## Required User Settings

AttributeData TypeDescription
`NameID`stringA unique, pseudo-random identifier for the user that will not change over time — like a user ID number.
`email`stringA verified email of the user signing in.
`originationType`enum: `MORTGAGE`, `HELOC`, `HELOAN`, `AUTO`, `PERSONAL_LOAN`, `SPECIALTY_VEHICLE`, `PERSONAL_LOC`Sets the appropriate application template for the user.

### Example SAML Assertions



## Optional User Attributes
AttributeData TypeDescription
`referrerID`stringEnsures the information included in a [Blend Referral](🔗) Link is effectively passed through the SAML authentication.
`firstName`stringThe SSO user's first name.
`lastName`stringThe SSO user's last name.
`primaryPhone`noneThe SSO user's primary phone number. Blend collects a single contact number.
`physicalAddressStreet`stringThe SSO user's current physical street address. This should be a physical address, not a PO Box used for mailing purposes.
`physicalAddressCity`stringThe city associated with the SSO user's current physical street address.
`physicalAddressState`stringThe state associated with the SSO user's current physical street address.
`physicalAddressZip`stringThe 5 digit zip code associated with the SSO user's current physical street address.
`physicalAddressCountry`stringThe 2 digit ISO country code associated with the SSO user's current physical street address. This value must be `US`.
`appSource`stringThe name of the LOS or CRM that the application was imported from
`applicationTemplateId`stringThe identifier for the program that the party is applying for
`communityId`stringThe community identifier of the applicant's residence
`dateofbirth`stringThe Date of Birth associated with the SSO user. Format should be in MM/DD/YYYY
`authToken`*stringAn authorization token Blend can use to retrieve additional information regarding the SSO user from your APIs, such as their bank accounts data.  Typically this is an OAuth token which authorizes Blend to access your APIs on behalf of the SSO user.
`ssn`*stringThe 9 digit Social Security Number associated with the applicant
  • The `authToken` supports Blend functionality not in scope of a Consumer SSO implementation. If you are implementing Consumer SSO, you can safely ignore this field.
  • The `ssn` is required in order to upgrade non-SSO applicants to SSO.
Omitted/Malformed Attribute Behavior
Blend ignores omitted or malformed attributes
### Specify your user attributes in the assertion's attribute statement.

## Errors
If any required parameters are missing or invalid, the authentication request will fail.