I should have been a bit more specific. Sorry for the added email. I am able to get the objectGUID but need to present it in the SAML assertion between {} brackets. I am getting the string I need without the brackets. How can I setup the mapper to append the brackets. From: keycloak-user-bounces(a)lists.jboss.org [mailto:keycloak-user-bounces@lists.jboss.org] On Behalf Of Ben Bazian Sent: Monday, February 29, 2016 1:40 PM To: &#39;keycloak-user(a)lists.jboss.org&#39; <keycloak-user(a)lists.jboss.org&gt; Subject: [keycloak-user] SAML Mapper for ObjectGUID I need to pass the objectGUID from Active Directory in a SAML assertion. Anyone know where to point me to setting up this mapper?