SSO configured via Azure, Just in time provision enabled but still receiving error on sign in | XM Community
Skip to main content

SSO configured via Azure, Just in time provision enabled but still receiving error on sign in

  • December 8, 2022
  • 2 replies
  • 816 views
J
Forum|alt.badge.img

Hi All,
As outlined in the question, we have configured the SAP Qualtrics enterprise app in Azure for SAML authentication.
We then created a new connection in Qualtrics SSO, and made this the default organization login for SAML. From within this connection, I have downloaded the service provider data and uploaded it into the Azure enterprise app, SAML config. I have also uploaded the metadata.xml from Azure into the Identity provider settings into the SSO settings in Qualtrics. Also within SSO, I have enabled "Just in time provisioning".
From what I can see everything looks to be correct, but when we attempt to sign in via SSO we receive the error "We are unable to process your username or the username doesn't exist in our system.".
I have confirmed through SAML trace that the attributes are being passed, and have configured the user attribute fields in the Qualtrics SSO screen to match.
Would any of you knowledgeable folks here happen to have a suggest as to how I can correct this?
2022-12-08_15-45-18.png

Thanks!

2 replies

A
Level 7 ●●●●●●●
Forum|alt.badge.img+22
  • ahmedA
  • Level 7 ●●●●●●●
  • December 8, 2022

I'm not sure what your exact issue is, but we faced a similar problem around 6 months back.
Turns out, that the usernames were different from the email ids. They were in the format email#orgName. Once we updated the SSO code to send the correct usernames, this error went away.
If you have a Qualtrics API key, then run WhoAmI to get details about your account. It'll also contain your username.

J
Forum|alt.badge.img
  • JFed
  • Author
  • December 13, 2022

Thank you for the response Ahmed!
In our case, we have both the email address and username configured to use 'user.userprincipalname' claim in the Qualtrics SSO config. I have confirmed through SAML trace that the proper UPN attribute is coming through during login, but for whatever reason Qualtrics doesn't want to allow the login through. The authentication is a success from the Azure side of things ...
Unfortunately I don't believe we have an API key, but I will dig a little further into that to confirm.


Terms & ConditionsAccessibility statement