# Problem with Entra ID SAML

**URL:** <https://forum.mattermost.com/t/problem-with-entra-id-saml/21533>\
**Category:** Troubleshooting\
**Created:** [November 19, 2024, 9:47pm UTC](https://forum.mattermost.com/t/problem-with-entra-id-saml/21533 "2024-11-19T21:47:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tastle73](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/tastle73/32/8493_2.png) [@tastle73](https://forum.mattermost.com/u/tastle73)\
**Post date:** [November 19, 2024, 9:47pm UTC](https://forum.mattermost.com/t/problem-with-entra-id-saml/21533/1 "2024-11-19T21:47:58Z")

</div>

**Summary**  
SAML assertions don’t seem to work with mattermost vs Entra ID

I have set up my E20 Mattermost as a SAML app in Entra/AAD and I can seem to figure out what Mattermost will accept as SAML Claims.

For example:

AAD has [http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress) so I put emailaddress in the Email Attribute field.

The log says this:

SAML login was unsuccessful because one of the attributes is incorrect. Please contact your System Administrator., emailaddress attribute is missing

Yet, the Received Assertion info directly above this has this:  
[Error](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress:){{urn:oasis:names:tc:SAML:2.0:assertion Attribute} [http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress) [{{urn:oasis:names:tc:SAML:2.0:assertion AttributeValue} [tom@xxxxxxxx.com](mailto:tom@xxxxxxxx.com)}]}

I don’t know what to do about this.

---

<div class="post-metadata">

**Author:** ![john.combs](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/john.combs/32/7118_2.png) [@john.combs](https://forum.mattermost.com/u/john.combs)\
**Post date:** [November 22, 2024, 2:04am UTC](https://forum.mattermost.com/t/problem-with-entra-id-saml/21533/2 "2024-11-22T02:04:00Z")

</div>

Hi @Tastle73, thank you for reaching out! It looks like the issue might be related to how the SAML attributes are being mapped. I recommend double-checking the **Email Attribute** field in your Mattermost SAML configuration to ensure it matches the exact attribute name being sent by Entra ID (e.g., `email` instead of `emailaddress`). You can find more details on configuring SAML in our [SAML Single Sign-On documentation](https://docs.mattermost.com/onboard/sso-saml.html). Let us know if you need further assistance!