SAML Idp federated with Service-Now

Hi

Are you sure that your %{session.logon.last.username} is an email address format ?

Deepnding on the VPE [logon] oject, if you "Split the username" , then the %{session.logon.last.username} is a "simple" name format.

I had a situation necently where I needed to change to %{session.logon.last.logonname}