
zoxyp (zoxyp) asked a question.
Recently a few users had their email addresses updated in OKTA. When they log in to an app the SP is receiving their old email address in the SAML response causing the log in to be rejected. The SP confirmed this is the case by changing the email in their system to match what is in the SAML response and this works. Is there a setting or step we are missing when changing email addresses?

Hi @zoxyp (zoxyp),
Thank you for posting on the Okta community page!
If the email address was updated on the users profile, you should make sure that the application username in Okta is as well update, by going on the app profile in your Okta organization and check the attributes on the assignments tab.
Okta updates the username automatically only if some conditions are met, based on the bellow documentation:
If you are not using the email address as the username in your application, you could double check the attribute on the application profile in Okta for the users in question.
I hope the above information is helpful!