Skip to main content
E
epilote1-Visitor
1-Visitor
April 23, 2020
Question

SSO Integration with Azure AD

  • April 23, 2020
  • 1 reply
  • 6012 views

Hey, im trying to setup the SSO integration with our Azure AD, on Azure im able to get the correct answer and to test it correctly. on the Chalk side I get : There was an error while testing your Identity Provider:
The 'email' attribute mapping is incorrect.

When i look in the Azure AD app, it's the same email as the one im connected.

 

Do you know if their is special things to do to get this working ?

thanks,

1 reply

T
tmccombie21-Topaz I
21-Topaz I
April 23, 2020

Could be a couple different things.

 

Can you confirm the email attribute you are entering into the configuration is correct? You can check this in your metadata.xml file. 

 

The other thing it could be is your email addresses being sent from your IdP have uppercase letters in them. The email addresses coming from your IdP need to match those in the Admin Center exactly and the Admin Center stores emails in all lowercase. 

    E
    epilote1-VisitorAuthor
    1-Visitor
    April 23, 2020

    Looking into the xml it's Email

    the email goes as follow :

    <auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
    xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706">
    <auth:DisplayName>Email</auth:DisplayName>
    <auth:Description>Email address of the user.</auth:Description>
    </auth:ClaimType>

     

    In azure, i see the claims being made and it's the same email entered in the portal.

     

    T
    tmccombie21-Topaz I
    21-Topaz I
    April 23, 2020

    Looks like your email attribute to enter into the SSO configuration is http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress. Please try using that instead of 'Email' and let me know the results. 

    Terms & ConditionsCookie settingsAccessibility statement