Attribute mapping for Social IDP
Summary:
We added the IDP using Open ID connect using Social IDP in OIA IAM Domain.
When we are trying to login with IDP getting below error.
As per below document it says,
The error was occurring since IDCS by default, not only expects email to be part of the UserInfo response from the IDP but also uses email as the identifier for user accounts ("username" attribute) for OIDC flows.
By default mapping is
IDP (email) --> username (IDCS). --> It is excepting "email" attribute and mapping as "username" for IDCS.
In our situation, the username is not an email address, instead it is a person number provided by Fusion.
Tagged:
0