Name-id is showing up as username instead of email

Questions
1

Hi, I am running into a problem where the name-id attribute while specified as a email is always showing as a display name. This appears to be the case when I create this app via api (if done manually through Okta, it works fine). here’s an example:

<saml2:Subject xmlns:saml2=“urn:oasis:names:tc:SAML:2.0:assertion”>
<saml2:NameID Format=“urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress”>tony.stark</saml2:NameID>

A duplicate copy of the app created manually with the same user shows:

<saml2:Subject xmlns:saml2=“urn:oasis:names:tc:SAML:2.0:assertion”>
<saml2:NameID Format=“urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress”>tony.stark@avengers.com</saml2:NameID>

In terms of configuration, this looks exactly like the one created from the GUI. The user name in the profile settings has an email address so it should be able to populate that. Thanks.

2

Hi! This generally is necessary to have Name ID Format EmailAddress which you already have and then update all user date by hitting button Update Now on Sign On tab … give it a try. Resolved my issues.