In SAML setup user is not getting login in the SP and receiving warning on the UI

Issue

After completing the SAML configuration, users fail to log in and encounter a warning message on the user interface.

Environment

• Liferay DXP 2023.Q4.0

Resolution

When configuring Liferay as both the Identity Provider (IdP) and the Service Provider (SP), you must align user attribute mappings to ensure successful authentication. Follow these steps:

1. Navigate to the Control Panel > Security > SAML Admin.
2. Open the Identity Provider Connection tab.
3. Ensure the following four mandatory parameters are added to both the IdP and SP configuration frames:
   • firstName
   • lastName
   • emailAddress
   • screenName

If any mandatory mapping, such as screenName, is absent, a warning displays on the UI and prevents authentication.

Additional Information

• SAML Authentication Process Overview