SAML Error Profile Did Not Include a user_id
Last Updated:
Overview
This article addresses an error that occurs when configuring a new Security Assertion Markup Language (SAML) connection. The connection has a custom mapping to set the user_id to a specific claim (for example, urn:oid:0.9.XXXX.XXXXXXX.XXX.X.X), and the SAML Response confirms this claim is being sent. However, the following error is displayed:
Profile did not include an user_id. Make sure your user_id mapping points to the correct property
Applies To
-
SAML Connections
Cause
The User ID Attribute on the connection's main settings page is configured with a value (for example, "email").
This value takes precedence over the mapping configured on the Mapping tab for the user_id, overriding the urn:oid:0.9.XXXX.XXXXXXX.XXX.X.X value. If the SAML response does not contain a claim that matches the User ID Attribute value ("email" in this case), no claim is assigned to the user_id, which results in the error.
Solution
-
Navigate to the main settings page for the SAML connection.
-
Locate the User ID Attribute field.
-
Delete the value from this field (for example, "email"), leaving it blank.
After this change, the mapping from the Mapping tab will be used for the user_id