Forum Discussion
Kyle_S
Nimbostratus
NimbostratusSAML IdP logon page to pass email address to SP
I created a logon page which uses username and password to authenticate the user with AD but the SP is requesting the users email address in the SAML assertion. If I set the IdP service Assertion Sub...
Walter_Kacynski
Cirrostratus
CirrostratusYou must use the AD Query agent in the VPE. If you do not specify any attribute for selection, ALL attributes are return from AD for that user. For memory and performance reasons, I would suggest that you explicitly code which attributes that you want to store in the users' session.
In my SAML uses, I usually have the entity id set as unspecified. I guess this depends on what you SP is expecting.