SAML Error Profile Did Not Include a user_id

Overview

This article addresses an error that occurs when configuring a new Security Assertion Markup Language (SAML) connection. The connection has a custom mapping to set the user_id to a specific claim (for example, urn:oid:0.9.XXXX.XXXXXXX.XXX.X.X), and the SAML Response confirms this claim is being sent. However, the following error is displayed:

Profile did not include an user_id. Make sure your user_id mapping points to the correct property

Applies To

  • SAML Connections

Cause

The User ID Attribute on the connection's main settings page is configured with a value (for example, "email").

image.png
This value takes precedence over the mapping configured on the Mapping tab for the user_id, overriding the urn:oid:0.9.XXXX.XXXXXXX.XXX.X.X value. If the SAML response does not contain a claim that matches the User ID Attribute value ("email" in this case), no claim is assigned to the user_id, which results in the error.

Solution

  1. Navigate to the main settings page for the SAML connection.

  2. Locate the User ID Attribute field.

  3. Delete the value from this field (for example, "email"), leaving it blank.

After this change, the mapping from the Mapping tab will be used for the user_id

Recommended content

No recommended content found...