lzbca (lzbca) asked a question.
omniauth.auth attribute is missing for SAML login
Hi!
I am working on integrating my enterprise app with Okta SSO. I have implemented the method to identify the user email trying to sign in, using the SAML statement provided by Okta. A couple of months ago I could get this information in the omniauth.auth attribute of the request my application received, but now that attribute is gone and I cannot find the user's email anywhere on the reply I get from Okta. I configured the appropriate Attribute Statments but that was not the problem apparently.
Thanks
Hi Jorge,
If you are sending the attribute using the SAML assertion, then please make sure that the attribute is being pushed by going to the application -> General -> Edit SAML Settings -> and in step 2, make sure the attribute is correct. More documentation can be found in the link below:
https://developer.okta.com/docs/guides/saml-application-setup/overview/
If the application is working using provisioning, please make sure the attribute is defined correctly in the Okta Profile Editor. More information can be found in the link below:
https://support.okta.com/help/s/article/Okta-is-not-updating-users-attributes-in-some-applications
If the issue continues to occur, please open a support ticket so we can have a thorough look at the settings and application.