Unexpected attribute and claim in Single Sign-On with SAML

Question

Unexpected attribute and claim in Single Sign-On with SAML

John Smith 21

Hi

I have a Microsoft 365 E3 subscription.

I have successfully added a new application (uniFLOW Online) in Enterprise application (Azure Active Directory).

I have also configured the required attributes and claims in SAML to match with what was configured in my uniFLOW Online tenant.

When I performed a Single Sign-On at my uniFLOW Online tenant, all the identities are claimed correctly except for username.

Instead of displaying John Smith, it was showing my email address.

Can you advise how should I configure the username attribute and claim in the new application (uniFLOW Online) so that the username displayed will be John Smith. Thanks.

I attach screenshot of the settings in Attribute and claim for your persual.

The claim name I configured for username is http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

Accepted answer

1 additional answer

Your answer

Answer 1

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi JohnSmith-9296,

Thanks for reaching out.

I understand you are looking to configure username in the attribute to match with uniFLOW Online application but getting email address instead of full name.

As per the screenshot attached, the claim http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name you are using to set username is mapped with user.userprincipalname which has email address value as shown below.

To get the full name in the attribute, you need to edit the attribute mapping by clicking on Edit icon and change the attribute mapping to user.displayname. The display name maps the name as mentioned in user's profile and User Principal Name maps the unique email address of that user.

Hope this will help.

Thanks,
Shweta

-----------------------------------------------

Please remember to "Accept Answer" if answer helped you.

John Smith 21 Reputation points

2022-05-11T02:39:00.013+00:00

Hi Shweta

Thank you so much for replying.

I took your advice and the result is what you explained. Now instead of email address, my name (John Smith) is displayed.
However I discovered another issue. My windows username as seen from Task Manager>>Users is JohnSmith.

When I tried to do a printing from my laptop with this JohnSmith username, printing is not possible as JohnSmith is not registered in the uniFLOW Online application.

Should Task Manager>>Users be showing JohnSmith or John Smith?

Is there a way to configure the mapping of username so that the end result will be JohnSmith instead of John Smith?

Regards

John
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2022-05-11T11:04:51.423+00:00

Hi JohnSmith-9296,

Glab you are able to resolve the issue.

I am not sure how uniFlow Online application works and map username

1.If you are admin, you might try to update the name John Smith to task manager or you can update the name JohnSmith in the Azure AD by navigating to Azure Portal ->Azure Active Directory -> Users -> Click on John Smith and edit the name to JohnSmith to match with Task Manager's.

2.Alternatively, as you mapped attribute above with user.dispalyname. You can add transformation to attribute by joining givenname(John) and surname(Smith) as:

Hope this will help to update name.

Thanks,
Shweta

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

Answer 2

afu 6

By default, the printing system uses the computer's login name as the authentication user name.
JohnSmith=print login=user1
John Smith =user2

In the user identities attribute of uniflow online, there is a user name, where the user name is equal to the computer's login name
If no user name is set in identities, it will use the name displayname in general as the user name to display on the Canon MFP screen
Answer you via google translate (non-native English speakers)

afu 6 Reputation points

2022-09-11T02:13:02.573+00:00

forget a little
The login interface of the multifunction machine screen should display the user name
The screen of the multifunction machine uniflow secure printing interface shows the display name

Share via

Unexpected attribute and claim in Single Sign-On with SAML

1 additional answer

Your answer