Troubleshooting
The IdP does not send the attribute, or sends it under another name (mail, email or a long URI-style name).
Probable cause. The IdP does not send the attribute, or sends it under another name (mail, email or a long URI-style name).
To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.
All SAML and OpenID Connect errors
Want to see it for real? ID-Kit plays the role you are missing and shows you each step.