Skip to main content

Using SAML for self-registration (Legacy)


If you are using the new Single Sign-on and Just-In-Time Provisioning feature, see Using SAML for JIT provisioning.

You can use SAML self-registration to provision new users or update existing user records.

By using SAML self-registration, you can use a SAML assertion to provision a new user in the Veracode Platform. SAML self-registration eliminates the need for preliminary provisioning of users. If SAML self-registration is available, you can sign in to the Veracode Platform using SAML and have a login automatically created with default roles and privileges. You can choose to allow self-registered users to access the Veracode Platform immediately or require approval before they can access it.

SAML self-registration also allows you to update existing user records with fresh information from your identity provider. If there are changes to the first or last name of a user, phone number, or email address, your identity provider automatically propagates these values to Veracode without requiring administrator intervention.

SAML self-registration takes advantage of the SAML specification support for optional attributes in the SAML XML document. Veracode requires specific attributes for using SAML self-registration. You can add other attributes to populate additional data for new or existing records.

Required and optional SAML attributes

Veracode recognizes these SAML attributes as containing information for SAML self-registration. The attributes firstname, lastname, and email are required. You can provide the other attributes to supply additional information about the user to Veracode. Veracode requires that you either specify the default Veracode user role in the SAML attributes, or you choose to use SAML assertion data, in which you must specify the Veracode user role.

First name of the user.
Last name of the user.
Email address of the user.
rolesComma-separated list of valid Veracode roles. If not provided here, you must specify the default user roles using SAML assertion data.
teamsComma-separated list of teams to which the newly registered users are assigned. If you do not provide this information using the teams attribute, you must specify the default teams using SAML assertion data.
teamsmanagedComma-separated list of teams managed by the team administrator.
hasiprestrictionSet to TRUE if the user is restricted to a certain IP range. Requires that you enter a value for ipaddresslist.
ipaddresslistThe IP range to which the user is restricted for login.
customoneCustom Field One.
customtwoCustom Field Two.
customthreeCustom Field Three.
customfourCustom Field Four.
customfiveCustom Field Five.