SAP Knowledge Base Article - Preview

3778050 - SSO login fails for non-personal account due to missing idp attributes (email, firstname, lastname)

Symptom

  • SSO login for a non-personal/admin account fails while other users can sign in.
  • Error: "The Identity Provider (IDP) configuration is incomplete. Missing required attributes: email, firstname, lastname. Please contact your workspace administrator to configure the IDP with the required user attributes and ensure the required properties are set for your user. User: user's email."
  • The IdP user object shows null/blank values for firstname, lastname, and email.


Read more...

Environment

  • Product: ;
  • SAP LeanIX MTM Single Sign-on

Keywords

sso, login failure, idp attributes missing, email required, firstname required, lastname required, non-personal account, robot account, entra id, azure ad, upn mapping, claim transformation, saml assertion, attribute validation, signing service , KBA , LIX-MTM-SSO , SAP LeanIX MTM Single Sign-on , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.