Customize SAML Name ID

Get Help
,
2

Hi @saravanan109587 !

Could you try out the following scenarios under the SAML2 Web App Settings?

  1. Mapp the “/nameidentifier” and “/emailaddress” claims with the same user property “email”:
{"mappings": {
"name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/userName",
"email": ["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"]
},
  "nameIdentifierProbes": [
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  ]
  1. Or try removing from “mappings” the
    "user_id": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"
    so the Settings looks like this:
{
  "mappings": {
    "name": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/userName",
    "email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
  },
  "nameIdentifierProbes": [
    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  ]
}

You feedback would be appreciated!

1 Like