# Associate Sitefinity CMS roles to external claims

## Overview

When you use third party identity providers, such as ADFS, you can configure Sitefinity CMS to automatically maintain the membership of users in Sitefinity CMS roles when the role of a user in ADFS changes or a new user is created.

> success **EXAMPLE**: A user is assigned a new role in ADFS. You can map this role to a role in Sitefinity CMS. Then, all users that acquire the role in ADFS will be automatically assigned to the mapped role in Sitefinity CMS.

## Create the claims to roles mappings

1. Navigate to *Administration* » *Settings* » *Advanced*.
2. In the left pane, expand *Authentication* » *RelyingParty* and click *Claims to roles mappings*.
3. Click *Create new* and fill out the following information:
   1. In *Name*, enter the name of the mapping.\
      For example, enter `PRgroupToAuthors`
   2. In *Claim type*, enter the full name of the type of the external claim.\
      For example, enter `http://schemas.microsoft.com/ws/2008/06/identity/claims/role`.
   3. In *Claim value*, enter the value of the external claim.\
      For example, enter `sitefinity.adfs\Domain Users`. This means that a user with claim `role` is logged in as a domain user.
   4. In *Mapped roles*, enter a comma separated list of Sitefinity CMS roles that the claim will be mapped to.\
      For example, enter `BackendUsers` `, Administrators`
4. Save your changes.
5. Restart the application.