无法设置 OKTA 联合,出现错误
适用于
- BlueXP Connector
- 联合身份/登录
- SAML 身份提供商
- OKTA
问题
在联盟设置页面上创建成功连接后测试 OKTA 联盟连接设置时报告错误:
Ensure that your SAML idP have attribute statement "email" (in lowercase letters) with the user email. The SAML response should include the following:
<saml:AttributeStatement xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><saml:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName"><saml:AttributeValue xsi:type="xs:string">email@domain.com</saml:AttributeValue></saml:Attribute></saml:AttributeStatement