SAML2 with ADFS: change of claim name

On-Premise
1

We had to rename one of claims/attributes in ADFS and as consequence we have to reenable SAML2 Authentification. I tried to reenable it but it seems sentry uses cached values from last time or at least the error prints old values. Is there a way to reset or clear cache so that new input is used?

Authentication error: Failed to map SAML attributes. Assertion returned the following attribute keys: dict_keys([‘http://schemas.xmlsoap.org/ws/2005/05/identity/claims/objectidentifier’, ‘http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress’, ‘http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name’, ‘http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname’])

‘http://schemas.xmlsoap.org/ws/2005/05/identity/claims/objectidentifier’ was renamed ro ‘http://schemas.xmlsoap.org/ws/2005/05/identity/claims/namedentifier’

I’m using onpremise 20.12.1

Update: it is possible the response from ADFS is the problem here. I will report back my findings

2

After a few minutes debugging with chrome extension SAML-tracer the problem became apparent. We were missing claims in response from ADFS.

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.