Troubleshooting

Missing NameID or unexpected format

The application expects an email address and the IdP sends an opaque identifier (or the other way round).

"NameID missing" or unexpected formatNameID

Probable cause. The application expects an email address and the IdP sends an opaque identifier (or the reverse).

What to do? Align the format: emailAddress or persistent on both sides, and check that the IdP has the matching value for the user.

To see exactly which check fails, paste the response into theanalyseur, or paste the message into the diagnostic.

Related errors

Want to see it for real? ID-Kit plays the role you are missing and shows you each step.