https://descope.com logo
Join Slack
Powered by
Hey team Ive sent a link to initiate the tenant's ...
# ask-a-descoper
a
Hey team Ive sent a link to initiate the tenant's SSO Setup Suite they are using entraID My required fields are Display Name , Email, Family Name & Given Name They sent me screenshots and it looks they configured it all yet the get the follow How can I debug this myself ?
d
This means that the SAML Response from the IdP did not return these values.
They can send you the SAML Response, they have it in the SSO Setup Suite after the test. And you can also view the SAML Response in the audit log of the “LoginSucceeded” event.
By the way, requiring all these fields is a bit tricky, since not all Identity Providers even sent them by default (or at all), so it will cause you a bit of a friction asking your customer to make sure the Identity Provider actually sends them.
✅ 1
Usually email will be there, but names not sure.
a
cant find their specific log to see what came back Is there another way to search for it ? Used tenant Id but it return logs for other tenant as well since it is a list of lots of tenants
d
Can you share their tenant id? I will check
It might be something else then.
And your project id.
ok I looked at your logs, and looks like the missing attribute is the display name. For tenant: 
T39Z9ZMVqVsR4kTudJbx4Iwj5Yyb
I do see that they have 2 SSO SAML settings configured, one with the mapping and the second one without that mapping. You can also go to their tenant from the Descope console UI and see their actual settings.
They probably skipped the mapping step and went directly to the Save and Test.
5 Views
Open in Slack
PreviousNext
Powered by