# SAML 2.0 field for affiliation role delimiter

The Identity Provider (IdP) can pass in affiliation role information for account holders. This field works in conjunction with

- SSO field for affiliation IDs
- SSO field for affiliation emails
- SSO field for affiliation roles

If you set these role mapping fields, the account holder will be granted the associated roles in the institutions indicated in the affiliation roles array that are passed in.

The delimiter value is used to split the string into the role and the institution components. For example, if the delimiter is '@', it will split 'staffmember@institute_a' into role = staffmember, institution = institute_a.

That means, if the role associations passed in from the IdP are 'staffmember@institute_a' and 'administrator@institute_b', the following role mappings are made:

- staffmember@institution_a: Institution staff in institution 'institution_a'
- administrator@institution_b: Institution administrator in institution 'institution_b'