Claim mapping converts SAML assertions into OIDC tokens Claim mapping transforms IdP attributes into SP-expected formats for consistent user data Claim mapping encrypts user attributes before sending them to the SP Claim mapping automatically assigns user roles based on login time