In the DualShield Admin Console, navigate to "SSO | Service Providers"

Create Service Provider

On the toolbar, click the "Create" button

Fill in the form as below:

Add SAML Attributes

Now, click the "Attributes" tab

We are going to add 3 SAML attributes

The first attribute is "IDPEmail" and map it to: userPrincipalName.

The second attribute is "ImmutableID", use script to map it to: userID.decodeHex().encodeBase64().toString()

The third attribute is "username" and map it to: loginName.

For this attribute, select "URL Path" as the location and enable the "Get Input" option

Change NameIDFormat

Now, click the "General Settings" tab

change NameIDFormat to "Map to the following attribute", and Attribute to "ImmutableID".

Finally, click "Save"