Auth0 SSO Error for Zendesk: No Attribute Found for nameIdentifier

This article addresses an error that occurs when a user attempts to sign in to Zendesk via an Auth0 Single Sign-On (SSO) integration.

No attribute was found to generate the nameIdentifier. We tried with: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

• Zendesk Single Sign-On
• Auth0
• Security Assertion Markup Language (SAML)

The Zendesk integration attempts to generate the SAML assertion's NameIdentifier using the email address from the user profile. This error occurs because the user profile does not contain an email address.

1. Inspect the tenant log message using the search query: "No attribute was found to generate the nameIdentifier. We tried with: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"

2. Retrieve the user ID from the error log and locate the user in the Dashboard.

3. Confirm that the user's profile is missing the email address property.

4. To resolve the error, identify why the user profile lacks an email address. This often occurs if the upstream Identity Provider (IdP) is not sending an email address or if the user attribute mapping is configured incorrectly on either the IdP or Auth0 connection.

5. Configure the upstream IdP to send an email address or correct the profile mapping for the related Auth0 connection.

NOTE: If the root cause remains unclear, obtain an HTTP Archive (HAR) file capturing the complete sign-in flow to assist with troubleshooting.