SSO settings issues

[Leonardo.sdc]

Hi!

We are trying to configure SSO via Cloudflare ZeroTrust on n8n, but the following error occurs:

SAML Authentication failed. Invalid SAML response (missing attributes: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/firstname, http://schemas.xmlsoap.org/ws/2005/05/identity/claims/lastname).

We use Google Workspace internally at Cloudflare, so the attributes were created in Google Workspace, but the errors persist. I also created them in ZeroTrust, but even applying the attributes in the header, the error persists.

Is there a procedure for how this should be done?

[marchello221189]

@Leonardo.sdc

We use Google Workspace internally at Cloudflare, so the attributes were created in Google Workspace, but the errors persist. I also created them in ZeroTrust, but even applying the attributes in the header, the error persists.

I faced the same issue when configuring SSO.
To solve this issue, you must be sure that the attribute for the claims is sent with the full path: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress.
By default it cuts and sends “emailaddress”.
To check what you are getting in SAML, use [[SAML trace]]