How to Configure IDP Username in External IdP Integration
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
To configure the IdP username field, idpuser must be used as a prefix attribute name instead of appuser.
Applies To
- External IDP
- Inbound Federation
- Single Sign-On (SSO)
Cause
If using the following type of expression language-based configuration idP username: String.substring(appuser.firstName,0,6)+"."+appuser.lastName+"@example.com", the following error message is received:
Solution
To use a custom configuration idp username, idpuser based attribute name must be used.
For example:
- Use firstname and lastname from the external IDP to verify IdP Username during inbound federation using he following format of IdP attribute name:
String.substring(idpuser.firstName,0,6)+"."+idpuser.lastName+"@example.com".
