Troubleshooting

Attributes (name, groups…) are empty

The IdP does not send the attribute, or sends it under another name (mail, email or a long URI-style name).

The attributes (name, groups…) are emptyAttributes

Probable cause. The IdP does not send the attribute, or sends it under another name (mail, email or a long URI-style name).

What to do? In the IdP, add the attribute to the list sent to this application; in the application, enter the exact name, case included.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

All SAML and OpenID Connect errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.