How to resolve error " Your Identity Provider did not send your email address in your authentication token. Please contact your administrator and ensure the Identity Provider is properly configured. (#236)" ?
Error Message:
"Your Identity Provider did not send your email address in your authentication token. Please contact your administrator and ensure the Identity Provider is properly configured. (#236)"
Troubleshooting:
- Collect SAML Tracer and check the SAML request
- Do not get the email address in the SAML assertion
- The expected response in SAML assertion should be like:
Resolution:
- Make sure the email attribute parameter is correct in the configuration in Ping Federate, It should be set to "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
Details of PingFederate metadata file PingFederate should be changed:
From:
To: