From 05049b0901c12d5ba5df360bd6747776119145f4 Mon Sep 17 00:00:00 2001 From: Kent Japhet Ballon <kballon@gitlab.com> Date: Tue, 5 Dec 2023 00:23:33 +0000 Subject: [PATCH] Updated support for Microsoft attribute names --- doc/user/group/saml_sso/troubleshooting.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/user/group/saml_sso/troubleshooting.md b/doc/user/group/saml_sso/troubleshooting.md index 8fc0c48a78c2..1e7de8143e90 100644 --- a/doc/user/group/saml_sso/troubleshooting.md +++ b/doc/user/group/saml_sso/troubleshooting.md @@ -366,10 +366,10 @@ This error appears when the SAML response does not contain the user's email addr </Attribute> ``` -Attribute names starting with phrases such as `http://schemas.microsoft.com/ws/2008/06/identity/claims/` like in the following example are not supported. Remove this type of attribute name from the SAML response on the IDP side. +Attribute names starting with phrases such as `http://schemas.xmlsoap.org/ws/2005/05/identity/claims` and `http://schemas.microsoft.com/ws/2008/06/identity/claims/` are supported. ```xml -<Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/email"> +<Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/emailaddress"> <AttributeValue>user@domain.com‹/AttributeValue> </Attribute> ``` -- GitLab