Issue
Use sAMAccountName as Name ID policy in Identity Provider record.
Procedure
In ServiceNow, make sure the following properties are configured:
- Multi-Provider SSO > Identity Providers > [Your IdP record] > User Field: user_name
- Identity Providers > [Your IdP record] > NameID Policy: urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
- Multi-Provider SSO > Administration > Properties > The field "User Identification": user_name
In your ADFS, make sure the following Claim Rules are configured:
- Claim Rule Name: Get LDAP Claims > Mapping of LDAP Attributes > LDAP Attribute: sAMAccountName | Outgoing Claim Type: Name ID
- Claim Rule Name: Email to Name ID > Incoming claim type: sAMAccountName | Outgoing claim type: Name ID | Outgoing name ID format: Unspecified
