SAML SSO Configuration

[rakesh_iam]

Hi All,

We are setting up SAML SSO using Okta as IdP. We would like to know whether secondary email address can be used to match the user based on the assertion sent from Okta.

We tried providing secondary email in the auth groovy file as secondaryEmailAddress or secondaryEmail but both are resulting in error.

Kindly let me know if it is possible to use secondary email address in-addition to username and email address?

[RakeshMG]

Could you please try secondaryemail or secondaryemailaddress. All should be in small case.

[rakesh_iam]

we have tried both and it didn't work.

We are fine if any other attribute can be used such as employee id or any custom property too. Ideally what we are looking for is to have attributes other than username and email to identify the user object.

[RakeshMG · Accepted solution]

For custom property please try : grails.plugin.springsecurity.saml.userlookup='customproperty12'