SAML with Azure - attribute mapping

I think I’ve read all the existing SAML posts, had good luck with this doc, translating into an Azure AD enterprise app for SSO with SAML. I’m running the latest on Docker on Ubuntu Server 18.04.

I’m getting the No attributes could be mapped error. My array looks like this:

image

My claims in azure look like this

I’ve seen references to looking up logs, but am getting nowhere. I used a SAML message decoder plugin for Chrome and I get this:

<samlp:AuthnRequest xmlns:samlp=“urn:oasis:names:tc:SAML:2.0:protocol”
xmlns:saml=“urn:oasis:names:tc:SAML:2.0:assertion”
ID=“ONELOGIN_34f58ab917be5355f8b94b35b679fb6d99b4b1e3”
Version=“2.0”
IssueInstant=“2019-12-05T16:14:35Z”
Destination=“https://login.microsoftonline.com/76770421-6037-45bd-a10e-abb19d001f06/saml2
ProtocolBinding=“urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST”
AssertionConsumerServiceURL=“https://xibocms.rupertport.com/saml/acs”>
saml:Issuerhttps://xibocms.rupertport.com/saml/acs</saml:Issuer>
<samlp:NameIDPolicy Format=“urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress”
AllowCreate=“true” />
<samlp:RequestedAuthnContext Comparison=“exact”>
saml:AuthnContextClassRefurn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
</samlp:RequestedAuthnContext>
</samlp:AuthnRequest>

Would appreciate any suggestions on how to adjust attributes or how to further diagnose.

Thanks!

1 Like

This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.