SAML user provisioning - Support and Troubleshooting

SAML user provisioning Summary To automatically enable SAML User Provisioning please follow the steps below.

Instructions Navigate to Multi-Provider SSO > Properties . Select Enable Auto Importing of users from all identity providers into the user table (glide.authenticate.multisso.user.autoprovision) to activate this feature. Click Save . Navigate to Multi-Provider SSO > Identity Providers . Open the Identity Provider record. To create a record in the User table when the user does not already exist, select Auto-provision Users . (you may need to configure the form and add this field.) To enable user records to be updated when users log in to the IdP and the information on the IdP is out of date with the information on the User table, select Update User Record Upon Each Login . ( you may need to configure the form and add this field.) Click User Provisioning Transform Map to see the map that the system automatically creates. Make changes to the map as needed. Related Links For the user provisioning to work the SAML response should contain AttributeStatement with the values that need to be inserted/updated in the user table. Here is a sample AttributeStatement that should be contained in .... for user provisioning http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn "> test@test.com test@test.com John test@test.com 1234567 Test 1234 Mac Ave TX IT Systems Consultant Communications Management +1 (123) 456-7890 12345 san jose CN=test\, Jack,OU=test Users,OU=CTM,OU=CSD,OU=test,DC=test,DC=org CN=test\, test,OU=CTM Users,OU=CTM,OU=test,OU=test,DC=test,DC=org The import set will have the following name format u_imp_saml_user_ To check the SAML response or attributes that are coming in enable debug Navigate to Multi-Provider SSO > Properties Check Enable debug logging for the multiple provider SSO integration Check the log: System Log > All (syslog) for message containing SAML Response xml OR AttributeStatement