Using email instead of user_name on SSO

Keith Gonzales · ‎02-10-2022

Hi.

I just want to ask, is it possible to use the email field instead of the user_name field when using external login? Our users are synched from AD, and some of their usernames exceed 40 characters, so when they try to login, the system couldn't find their user_name because it's truncated. I found two properties in sys_properties table:

glide.authenticate.header.value
glide.authenticate.multisso.login_locate.user_field

both of which has user_name as their value. The second one is the property listed in the Multi-Provider SSO > Administration > Properties. I wonder what property we could change to email and what other configurations we have to do after changing the property?

Has anyone ever tried this before?

I've already seen questions like this, but the authors didn't verify if the answers they received were helpful.

Thank you very much for taking your time to read (and hopefully answer too) this post.

shloke04 · ‎02-10-2022

Yes you can use it. We are also using email for us instead of User Name.

You need to follow the steps below to achieve this:

1) Navigate to the module "Identity Provider" and open the SSO record which you have configured and then under "Advanced" tab change user_name to Email as shown below

2) Also after this, Navigate to the properties module and make sure to change it here as well as shown below:

Also after these changes are done you need to work with your OKTA team as well to make this change at their end as well so that user can authenticate correctly.

Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke

Hope this helps. Please mark the answer as correct/helpful based on impact.

Regards,
Shloke

View solution in original post

Logan Poynter · ‎02-10-2022

You can use email, the default is just user_name and you were in the right Properties. In the property The field on the user table that identifies a user accessing the User identification login page, enter the field on the User table that contains the value the IdP uses to identify the user. The default value is user_name.

Nayan Mahato · ‎02-10-2022

Hi Keith,

You simply go to the "Identity provide page" and on that page under the advance section just change the user field with email and it should work. Thanks.

Regards,

Nayan

Keith Gonzales · ‎02-10-2022

Hi, Nayan.

What are the values in your instance for the properties I mentioned above?

Nayan Mahato · ‎02-11-2022

Hi Keith,

you just need to change the user field value to email in the advance tab and another to the below multi-provider SSO properties page . Thanks.

Regards,

Nayan