When attempting to add certain attribute statements to SAML applications integrated from the Okta Integration Network (OIN) Applications Catalog and attempting to save the newly added attribute statements, the following error messages might be encountered:
- We found some errors. Please review the form and make corrections.
- Invalid attribute name: The SAML attribute 'email' matches an existing attribute name within this integration. View the SAML 2.0 setup instructions for a list of predefined SAML attributes. Choose a different name for the SAML attribute to prevent name collision.
- SAML Attribute Statements
- Okta Integration Network (OIN)
- Applications Catalog
Many of the OIN Catalog application integrations come pre-configured with attributes known to be required by the service provider.
- In the screenshots above, the administrator is trying to add the SAML attribute statement "first_name." However, that attribute already exists preconfigured with that certain OIN Catalog application, so Okta is reporting an error when attempting to save the attribute statement because it can not send the same attribute twice.
To see all predefined attributes being sent by an OIN Catalog application, administrators would need to integrate the app and use the Preview SAML button from the Sign On tab. This will show all hardcoded attributes being sent by the application.
Predefined attributes of OIN Catalog applications always take information directly from the user's Okta profile. For example, the email attribute will always send the user's Okta email address (user.email) to the service provider application. Meaning that these attribute values can only be changed by making changes directly on the user's Okta profile.
The alternative to allowing the app to send attributes directly from the user's Okta profile or having to change the attribute values from the user's Okta profile is to create a custom SAML 2.0 application integration which does not come with any hardcoded attributes and allows full control over what attributes are being sent and where the information is taken from.
