Users identities - Infisical

User identities can have metadata attributes assigned directly. These attributes (such as location or department) are used to define dynamic access policies.

Setting Metadata on Users

  </Step>
  <Step title="On the User Page, click the pencil icon to edit the selected user.">
    
  </Step>
  <Step title="Add metadata via key-value pairs and update the user identity.">
    
  </Step>
</Steps>

</Tab> <Tab title="Automatically Populate Metadata"> For organizations using SAML for **user logins**, Infisical automatically maps metadata attributes from SAML assertions to user identities on every login. This enables dynamic policies based on the user's SAML attributes. </Tab> </Tabs>

Applying ABAC Policies with User Metadata

Attribute-based access controls are currently only available for policies defined on Secrets Manager projects. You can set ABAC permissions to dynamically set access to environments, folders, secrets, and secret tags.

In your policies, metadata values are accessed as follows:

User ID: {{ identity.id }} (always available)
Username: {{ identity.username }} (always available)
Metadata Attributes: {{ identity.metadata.<metadata-key-name> }} (available if set)