I'm using SAML request and having issue for one attribute "urn:mace:dir:attribute-def:eduPersonAffiliation" value not set in SAML response in some profile after update.
Have anyone faced this error?
If
you're dealing with a SAML integration issue in Magento 2.4.6-p6 where the eduPersonAffiliation attribute isn't being set correctly in the SAML response. This can indeed be frustrating, especially after an update. Here are some steps and suggestions to help you troubleshoot and hopefully resolve the issue:
First, ensure that your attribute mapping is configured correctly in Magento. The eduPersonAffiliation attribute needs to be mapped properly so Magento knows how to handle it. Check your SAML configuration in Magento to make sure this attribute is mapped to a user attribute correctly.
Review the SAML settings in your Identity Provider (IdP) configuration. It's possible that the recent update might have affected how attributes are sent. Ensure that the IdP is still configured to send the eduPersonAffiliation attribute in the SAML response.
Examine the raw SAML response to see if the eduPersonAffiliation attribute is present but perhaps not being processed correctly by Magento. You can use browser developer tools or a SAML tracer extension to view the raw SAML response.
Check Magento's logs for any errors or warnings related to SAML authentication. Logs are usually located in var/log directory within your Magento installation. Look for entries in exception.log or system.log that might provide more information on why the attribute is missing or not processed.
If you are using any third-party SAML extensions or modules, ensure they are compatible with Magento 2.4.6-p6. Sometimes, updates can introduce compatibility issues, and an update to the extension might be required.
Review Magento’s official forums, GitHub issues, or other community resources for any known issues related to SAML authentication in the version you are using. There might be patches or workarounds available for the problem you're experiencing.
If the issue is critical and no immediate solution is found, consider reverting to the previous Magento version (before the update) as a temporary measure while you investigate further.
If none of the above steps resolve the issue, you might want to contact Magento support or the support team of the SAML extension you're using. They could provide insights specific to your setup and the update in question.
Addressing these points should help in diagnosing and resolving the issue with the missing eduPersonAffiliation attribute in your SAML responses.