SAML Fields Required with Polaris

If SAML setup is not working, verify that your identity provider shares the required attributes with Polaris.

Table 1. Polaris SAML attributes. Polaris accepts the following attributes from SAML identity providers
Attribute name	Description
Username	The username of the user. Maps to the `User.username` field.
EmailAddress	This should be the email address that the user is logging in with. Although the EmailAddress attribute is not required, Polaris needs an email address. If the EmailAddress attribute is not set, Polaris will acquire the email address from the NameID SAML attribute. The NameID should be of type `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress` or otherwise `urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified` with an e-mail address.
FullName	The full name of the user. Maps to the `User.name` field.
Groups	The group associations of the user. Maps to the `User > Groups` entity relationship. The enable-group-inheritance property of the SAML IdP configuration in Polaris must be set to `true` for groups to work.