Hi All,

I need the ability to log the user trying to log in via SAML (Okta in our case) when they have either no account within Pega or the Username being sent doesn't match what we have in Pega without enabling Category logging for com.pega.pegarules.integration.engine.internal.auth.saml.SAMLResponseHandler.  As this logs everything for everyone.

We are seeing a lot of users complaining as they are seeing this message when trying to log in

Unable to derive operator from SAML assertion

How can this be achieved?  Preferably OOTB way of doing it.

Thanks Craig