3719831 - SAML users are unable to login with a new email due to error 403041 (Account Disabled) after the SAML identity in the existing SAML account with an old email is deleted and the old account is set as inactive

• Users experience error 403041 (Account Disabled) when attempting to sign in via SAML (SSO) with a new email address after their old SAML account has been disabled and the SAML identity removed.
• The system attempts to link the SAML authentication to the old user account associated with the previous email address, despite the SAML identity being removed from the old account.
• Audit logs indicate that the SAML assertion contains the new email address but still links to the old user account's UID.

• SAP Customer Data Cloud
• SAML

SAML login, error 403041, account disabled, SAP customer data cloud, SSO issue, new email address, old user account, SAML identity, Provider UID, NameID mapping, attribute mapping, SAP CDC, user authentication, login failure, gigya , KBA , CEC-PRO-CON , Admin Console (Settings, Administration, Queries / Reports) , Problem