Fusion Auth integration with Azure AD Saml the saml response returns user id as the nameid instead of the user email
-
I created an application in FusionAuth that uses SAML internally but it also uses an Azure AD created as a fusion auth identity provider. the SAML Nameid is defined as useremail in the actual Azure AD (it is the newest Azure AD which I believe Microsoft changed its name to Entra ID) which is configured as Saml. However when I test the integration the Nameid returns to my web application is id which turned out to be the user id created by fusion auth. However I was expecting the Saml response to return the user mail. I also changed the nameid format to email in both Azure AD and Fusion Auth IDP. why does the fusion auth return fusion auth user.id as part of saml response to my web application?
-
@mr-sahand Have you considered using a lambda to populate the info as you want it?
SAML v2 Populate Lambda (https://fusionauth.io/docs/extend/code/lambdas/samlv2-response-populate)
-
@mark-robustelli , thanks the issue though was my web app was sending the nameid format as persistent after removing it the issue was resolved.