https://sts.radiusworks.com/wiki/index.php?action=history&feed=atom&title=UserGlobalSettingsUserGlobalSettings - Revision history2026-11-14T18:29:32ZRevision history for this page on the wikiMediaWiki 1.43.11https://sts.radiusworks.com/wiki/index.php?title=UserGlobalSettings&diff=53&oldid=prevTheluis-admin: 1 revision imported2026-10-19T14:55:47Z<p>1 revision imported</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 09:55, 19 October 2026</td>
</tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div>
</td></tr>
<!-- diff cache key oceansp3_stswiki43:diff:1.41:old-52:rev-53 -->
</table>Theluis-adminhttps://sts.radiusworks.com/wiki/index.php?title=UserGlobalSettings&diff=52&oldid=prevold>Thewikiadmin at 14:58, 15 January 20202020-01-15T14:58:32Z<p></p>
<p><b>New page</b></p><div><br />
The following parameters will provide the necessary data for all SAML tokens where the HIS and/or the LDAP directory does not have the necessary information.&nbsp; This helpful when there are key attributes that would be challenging to manage for all users, but are globally the same for the organization or a set of users (as defined by the NameQualifier.<br />
<br />
It is possible to have different entries to match different NameQualifier values (or UserContextDomain) in order to accommodate environments where more than one organization, entity, or unique groups have to be supported.&nbsp;<br />
<br />
&nbsp;<br />
<br />
*Name: This value is merely a label and should be unique if there is more than one entry. <br />
*NameQualifier: this is the NameQualifier value that users will be matched against. For all users with the specified NameQualifier these values will be used (unless provided by the source system): <br />
**UAO <br />
**UAOType <br />
**grantByDelegateMeritOnly <br />
**IdentityProvider <br />
**IdentityVerificationSchemeRef <br />
**UAOIdentityVerificationSchemeRef <br />
**DelegationVerificationSchemeRef <br />
**CredentialVerificationSchemeRef <br />
**ProtectedNetwork <br />
**PrimaryFactor <br />
**GlobalRole: This value represents a set of comma-delimited roles that will be asserted in the SAML token <br />
**GlobalServiceEntitlement; <span style="color: rgb(255, 86, 48)">available since version 1.8</span> <br />
**AuthenticationLevel; <span style="color: rgb(255, 86, 48)">available since version 1.8</span> <br />
<div class="heading-anchor-wrapper"><div class="sc-fnwBNb qtHFV"><div>&nbsp;</div> </div> </div> <br />
== Example Configuration ==<br />
<div class="code-block right-shadow"><span style="font-size: 12px; background: rgb(244, 245, 247) none repeat scroll 0% 0%; color: rgb(23, 43, 77); border-radius: 3px; display: flex; line-height: 1.66667; overflow-x: auto; white-space: pre"><code style="font-size: 12px; line-height: 1.66667; padding: 8px"><UserGlobalSettings> <UserConfig Name="PrimaryUserPopulation" NameQualifier="corporate.hospital.on.ca" UAO="2.16.840.1.113883.3.239.22" UAOType="org" grantByDelegateMeritOnly="false" IdentityProvider="2.16.840.1.113883.3.239.22.13" IdentityVerificationSchemeRef="AL2" UAOIdentityVerificationSchemeRef="AL2" DelegationManagementSchemeRef="AL2" CredentialManagementSchemeRef="AL2" ProtectedNetwork="true" PrimaryFactor="Password" CompensatingFactors="" GlobalRole="" GlobalServiceEntitlement="MyService" AuthenticationLevel="AL2" Domain=""/> <UserConfig Name="SecondaryUserPopulation" NameQualifier="rehab.hospital.on.ca" UAO="2.16.840.1.113883.3.239.22" UAOType="org" grantByDelegateMeritOnly="false" IdentityProvider="2.16.840.1.113883.3.239.22.13" IdentityVerificationSchemeRef="AL2" UAOIdentityVerificationSchemeRef="AL2" DelegationManagementSchemeRef="AL2" CredentialManagementSchemeRef="AL2" ProtectedNetwork="true" PrimaryFactor="Password" CompensatingFactors="" GlobalRole="ConnectingGTA" GlobalServiceEntitlement="MyService" AuthenticationLevel="AL2" Domain=""/> <UserConfig Name="OncologyDepartment" NameQualifier="oncology.hospital.on.ca" UAO="2.16.840.1.113883.3.239.22" UAOType="org" grantByDelegateMeritOnly="false" IdentityProvider="2.16.840.1.113883.3.239.22.13" IdentityVerificationSchemeRef="AL2" UAOIdentityVerificationSchemeRef="AL2" DelegationManagementSchemeRef="AL2" CredentialManagementSchemeRef="AL2" ProtectedNetwork="true" PrimaryFactor="Password" CompensatingFactors="" GlobalRole="ConnectingGTA,Oncology" GlobalServiceEntitlement="MyService" AuthenticationLevel="AL2" Domain=""/> </UserGlobalSettings></code></span></div></div>old>Thewikiadmin