> ## Documentation Index
> Fetch the complete documentation index at: https://docs.edplay.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Set Up SSO Data Mapping in Edplay

> Data mapping tells Edplay how to read the fields your identity provider sends on employee login. Configure it once per workspace and it applies to every SSO sign-in.

Data mapping tells Edplay how to interpret the data your corporate identity provider sends when an employee logs in. Every company names its fields differently (`Department`, `group`, `job_title`, etc.), so Edplay needs a one-time setup that maps your company's field names to Edplay's internal fields. You only need to do this once per workspace. Once configured, it applies automatically to every employee who logs in via SSO.

## Before you start

* SSO must already be enabled for your workspace (see [SSO Configuration](/sso/sso-configuration)).
* Have your identity provider's attribute names ready. These are the exact SAML attribute names your IdP sends, for example `email`, `displayName`, or `department`.

## Open the Data Mapping wizard

<Steps>
  <Step>
    Go to **Workspace Settings** > **Security** > **Single Sign-On (SSO)**.
  </Step>

  <Step>
    You'll see a prompt: *"Please complete the data mapping for this to work. The email, name and role fields are required."*
  </Step>

  <Step>
    Click on it to open the **Data Mapping** wizard. It has two steps, shown by a progress indicator ("1 → 2") at the top.
  </Step>
</Steps>

## Understanding the mapping format

Step 1 (Fields) and Step 2 (Roles) use a different left/right column order. Pay attention to which side you type into on each step.

**Step 1 (Fields):**

* **Left column** — Internal field: the fixed Edplay field, already labeled (`name`, `email`, `role`, or an optional field you add like `Avatar`).
* **Right column** — External field: an empty box where you type the exact attribute name your corporate identity provider sends.

**Step 2 (Roles):**

* **Left column** — External field: an empty box where you type the exact role or group value your identity provider sends.
* **Right column** — Workspace role: a dropdown where you select the matching Edplay role.

In both cases, an arrow (→) shows the direction data flows: from what your company's system sends, into what Edplay does with it.

<Tip>
  If you are unsure of the exact attribute names your identity provider sends, check the SAML assertion logs in your provider's console or ask your IT team.
</Tip>

## Next steps

* [Map User Fields](/sso/map-user-fields) — Step 1: configure profile field mappings
* [Map Roles](/sso/map-roles) — Step 2: configure role and permission mappings