SAML login issue

Bhabani sankar Patra 7 months ago

Hi ,

I have configured NAM as SP and AD as IDP. Also selected the attribute matching for user identification i.e Email Address. SAML request and SAML response is happening fine and also getting the email value in <saml2:AttributeStatement> tag for NAM. but user authentication is failed and showing this error in NAM.

"Could not uniquely identify a user account using the following lookup expression: Null Lookup Expression. "

are there any steps which I have missed here?

Top Replies

Sebastijan Sef 7 months ago +1 verified

Have you defined attribute set (local attribute as LDAP mail and remote as whatever you receive in saml2:AttributeStatement), assigned this attribute set to federation and moved attribute from "available…

Verified Answer

+1 Sebastijan Sef 7 months ago

Have you defined attribute set (local attribute as LDAP mail and remote as whatever you receive in saml2:AttributeStatement), assigned this attribute set to federation and moved attribute from "available" list to left side as described here https://www.microfocus.com/documentation/access-manager/5.0/admin/b1ax6f15.html#idpattrs?

Please note that while configuring attributes in attribute se, you need to define namespace if attribute received in saml2:AttributeStatement uses them.

On the other hand, set SAML and Application logging to debug and in logs you should see LDAP filter that is used to match you user.

Kind regards,

Sebastijan

Kind regards,

Sebastijan

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button
Cancel
Vote Up +1 Vote Down

Sign in to reply

Reject Answer

Cancel
0 Bhabani sankar Patra 7 months ago in reply to Sebastijan Sef

Hi Sebastijan,

Thank you for your valuable suggestions. The issue is resolved now.

I have configured wrong remote attribute while configuring the attribute set and after configuring correct remote attribute, it is working fine.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Menu

Access Manager User Discussions

SAML login issue

Top Replies

Verified Answer

Resources