Information to consider for advanced SAML mapping
When configuring SAML Advanced Information Mapping, there are a number of items to consider for effective mapping to avoid unexpected results. You can review the information below regarding the section you are setting up to ensure desired outcomes.
Note: Some sections are dependent on their associated licensing types being tied to the account, for example, Zoom Translated Captions and Concurrent Licenses.
Information to consider that applies to all SAML Advanced Information Mapping sections
- Advanced SAML mapping is hierarchical.
- Advanced SAML mapping works off a contains basis rather than an exact match.
- Advanced SAML mapping works off a first-match basis, meaning the rule processing stops after an attribute name/value pair has been matched.
Note: An exception exists for Zoom Webinars and Large Meeting add-ons.
License Type
- No change will be made to an existing user’s license type unless there is a matching attribute name/value pair.
- None will block access to a user who matches None and will prevent user creation.
- If a licensed user has upcoming events and matches the Basic license type, they will not be downgraded to Basic.
Add-on: Zoom Webinars / Large Meeting
- The same attribute/value pair can be used to assign both Zoom Webinars and Large Meeting add-ons as separate entries.
Notes:
- Processing of Zoom Webinars rules will stop once a webinar match has been made.
- Processing of Large Meeting rules will stop once a large meeting match has been made.
- These matches are independent of each other. Outside of these exceptions, the first match rule applies.
- If this section is mapped and there is no matching attribute/value pair, the add-on will be removed.
- The Add-on cannot be changed from one type to another by changing the attribute/value pair, this must be done through user management, or the existing add-on must be removed first.
License: Zoom Events
- Only available for accounts with Zoom Events licensing.
- Cannot be assigned concurrently with webinar licensing and will override webinar licensing assignment.
- Capacity for an existing Zoom Events License may be upgraded through SAML mapping, but cannot be downgraded.
Add-on: Zoom Whiteboard
- Only available for accounts with Zoom Whiteboard plans.
- Users with an attribute/value pair match will be assigned licensing regardless of whether the user is licensed or basic.
Zoom Revenue Accelerator
- Only available for accounts with Zoom Revenue Accelerators plans.
- Only licensed users can be assigned a Zoom Revenue Accelerator plan through SAML mapping.
Add-on: Zoom Translated Captions
- Only available for accounts with Zoom Translated Caption addons.
- Can only be assigned through SAML, Zoom Translated Caption add-ons must be removed through User Management.
Add-on: Concurrent Meeting
- Only available for accounts with Concurrent Meeting addons.
- Can only be assigned through SAML, Concurrent Meeting add-ons must be removed through User Management.
Sign in to Sub Account
A page specific to primary/sub account should be created.
- Allows users to sign in to the designated sub-account utilizing the primary account’s SSO configuration.
- All mappings below the sub-account mapping section will not be applied to sub-accounts. They apply to the Primary account only.
- See Primary/sub account mapping page (which doesn’t exist yet).
User Role
- User role mappings will not be applied to the account owner.
- If the user does not match a matching attribute/value pair, the user will be placed in the Member group.
User Group
- Group mappings will not be applied to the account owner.
- If the user does not pass a matching attribute/value pair, no changes will be made to the user’s existing groups. To remove users from groups entirely, this must be done manually.
- If an attribute/value pair is matched, any existing groups will be overwritten by the groups specified in Advanced SAML Mapping.
- A single attribute/value pair must be utilized to map a user to multiple groups.
- Multiple groups can be specified in the Resulting Value field.
- The first group selected from the list of groups will be the primary group.
- Supports a maximum of 20 groups.
IM Group
Contact Group
User Group Admin
- If no matching attribute/value pair exists, no update will be made.
- If an attribute/value pair is matched, any existing group admin assignments will be overwritten by the group admin assignments specified in the Advanced SAML mapping.
Zoom Phone Calling Plan
- Only available for accounts with Zoom Phone Calling plans.
- Mappings do not apply to the owner.
- User must have a zoom phone extension number OR must already be an existing Zoom Phone user.
- Zoom Phone extension can be assigned through SAML Basic Mapping. When using Basic SAML Mapping to assign an extension, and Advanced SAML mapping to assign a calling plan, the user must sign in twice. First to be assigned their extension, and the second time to get the calling plan.


Zoom Phone Site
- User must have a zoom phone extension number OR must already be an existing Zoom Phone user.
- If there is no match, the site will not change.
Channel
Zoom Room Admin
- If there is no attribute/value pair match, no changes will take place.
- When there is an attribute/value pair match, the user’s current zoom room admin assignments will be overwritten.
Recording Location