SAMLResponse: IDP Config missing username attributes

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

Configuring SAML in a new environment, there is an Authentication error and in app-ca log file: 

 filter.SAMLFilter (clarity:admin:-1:none) Unable to get SAML token from SAMLResponse: IDP Config missing username attributes

Environment

Clarity with SSO

Resolution

1. Please make sure the user is added in SSO and has an email in Clarity. Or use your own user that has been added to SSO with your email and added in Clarity with the email and username is set accordingly.

2. Ask the IDP team to add the attribute Login (case sensitive) and set it to user.email

• If you do not use email as username in Clarity set it to whatever it's used as per SAML Login Attribute Set Up
• For Azure, you should keep the Namespace as blank when creating the claim "Login".

3. Then try connecting again and this should work. Clarity uses the Login attribute to connect so this must be set in order for it to work.