Question
EY Advisory & Consulting Co., Ltd.
JP
Last activity: 7 Dec 2017 0:39 EST
Cannot setup SSO with ADFS
Has anyone encountered a similar issue with SSO setup to ADFS?
I went setting up SSO with ADFS through the "SSO Workbook for CA" - https://docs.pega.com/ca-single-sign-federation-runbook but have encountered an error at the very end of the SSO process.
It is showing up "Unable to process the SAML WebSSO request : No value specified for attribute mapped to pyUserIdentifier property".
I also checked with Firefox's SAML debugger and it seems that the response is fine.
<AttributeStatement>
<Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress">
<AttributeValue>[email protected]</AttributeValue>
</Attribute>
</AttributeStatement>
I have already checked that mapping is setup correctly, but have had no luck. Please help...
Accepted Solution
EY Advisory & Consulting Co., Ltd.
JP
I have found out the issue.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
This needs to be set in full in the mapping settings. I had setup "emailaddress" but should be "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" instead.
Pegasystems Inc.
IN
In AuthenticationService in the mapping tab, USERID was mapped to .pyUserIdentifier propery is sames as USERID present in SAML response?
JPMorgan Chase & Company
US
Hi,
Please check which attribute is mapped to .pyUserIndentifier and make sure you had configured modal user in organisation unit. Also map the other organisation elements like Division and Unit.
Accepted Solution
EY Advisory & Consulting Co., Ltd.
JP
I have found out the issue.
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
This needs to be set in full in the mapping settings. I had setup "emailaddress" but should be "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" instead.