Are domain name case sensitive in the SAML2.0 Response?
Suppose I have example.com as valid domain also set as primary in the organization. Now if the SAML response will return
John.Doe@EXAMPLE.COM
. Will it discover the appropriate organization and create user account in it or cause a problem?2 Replies
Oh well good quesion @stebenz might know the best
Also followup question. We have domain discovery enabled. We have a user john.doe@example.com. On the UI it shoules the login methods in lower case regardless of the domain name casing in the verified domains. But when I use john.doe@example.com or john.doe@EXAMPLE.COM, domain discovery doesn't work at all. It says "User not found". But when I delete the old domain and add a new one (because it doesnt allow me, returns domain already exist error), with all the lower case letters it works like charm.
This also happens with the primary domain flag set on the domains.