Import SAML Attribute to Keycloak user

Hello,

I ask for your help in matching the content value in the “NameID” tag or the Name attribute http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name of the SAML response:

Name ID:


Attribute name:

With the Email field of Keycloak users:

I found that the connection works using the “Identity Provider Links” tab, but the email is hard-coded and if there is a change on the side of the Identity Provider, the connection is no longer possible .

Rather, I’m looking for a solution that would be linked to importing the value contained in the return assertion and modifying the value of the Email field there, then allowing the connection.
My research was oriented towards the Identity Providers menu and more specifically the “Mapers” tab

Whatever I try, it doesn’t work, below is an example:

Could you help me?

Thanks in advance

It looks right. Did you try lower case email for the User Attribute Name in the mappper?