Configuring Claims for a Service Provider
Claim mapping for a service provider involves mapping claims that are used by the service provider to the claims local to the WSO2 Identity Server. For the occasions where a service provider needs some information of the user from the Identity Server where the service provider authenticates, the claim mapping is useful. Once the user is authenticated, the service provider can use these received claim details to provide its service. See the Identity Server Architecture for more information on how claim mapping fits in to the overall scheme of things.
Claim mapping
Caching service provider claims
If you want to cache claim data, be sure to add a cache configuration similar to the following under <CacheManager name="IdentityApplicationManagementCacheManager"> in the <IS_HOME>/repository/conf/identity/identity.xml file:
<Cache name="LocalClaimInvalidationCache" enable="true" timeout="300" capacity="5000" isDistributed="false"/>Here, you need to specify values as follows:
timeout: The cache timeout value in seconds.capacity: The maximum cache size.isDistributed: Set this tofalse.
See the Logging in to Salesforce with Facebook topic for a sample of claim mapping for a service provider.