Question
Eviden
NL
Last activity: 17 Aug 2022 21:22 EDT
Issue with response attribute mapping @ SAML
What's the correct way to map a SAML response?
Attribute received with SAML Response
<saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200 Proprietary information hidden" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" > <saml2:AttributeValue>rick</saml2:AttributeValue> </saml2:Attribute>
As per the below article, we should map with the following syntax {uid}
https://docs-previous.pega.com/security/85/creating-saml-sso-authentication-service-app-studio
However, when I use {uid}, I can not pick the uid value from the SAML Response and I get bellow error
Unable to derive attribute %28uid%29 from SAML assertion for operator establishment
Do you have an idea what I might be missing?
EIB
PL
@PritamChakraborty Can you trace SAML login with SAML-tracer and check attribute statement in SAML response? We get below entry in xml and mapping using {Email} works correctly.
<saml:Attribute Name="Email"> <saml:AttributeValue>xxx</saml:AttributeValue> </saml:Attribute>
Eviden
NL
@EngincanY In my SAML Trace, it appears as below and {mail} did not work for me
<saml2:Attribute FriendlyName="mail"
Name="urn:oid:0.9.2342.19200 Proprietary information hidden"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue>[email protected]</saml2:AttributeValue>
</saml2:Attribute>
Virtusa
US
@PritamChakraborty were you able to resolve this issue? I'm also facing this issue