LDAP User and SAML User are not getting matched

[itkama]

Infos:

• Used Zammad version: 6.4.1-1741933941.0923b150.jammy
• Used Zammad installation type: package
• Operating system: Ubuntu 22.04
• Browser + version: Chrome 134

Expected behavior:

• Users are synced via LDAP (works). Now I want them to be able to login via SAML via Entra ID, where those users exist as hybrid identities synced via Entra ID Connect. Once I login via SAML I should login as the user that was synced via LDAP before.

Actual behavior:

• Once I login via SAML, a new user user.name@domain.com1 gets created instead of being logged in as user.name@domain.com. The newly created user also has no other attributes like a name assigned to it.

Steps to reproduce the behavior:

• Configure LDAP. Have users with the same attributes login via SAML

This to me sounds similar to this thread:

Associate LDAP and SAML users doesn't work anymore

Infos: Used Zammad version: 6.0.0-1691139038.c2b281b3.focal Used Zammad installation type: ubuntu repo Operating system: ubuntu focal Browser + version: chrome on windows 11 Expected behavior: all users which exist in LDAP should be automatically associated with SSO users login in via SAML if they have the same email. Actual behavior: only users which already logged in using SSO months before get associated witht heir LDAP user when logging in to Zammad using SSO. Steps to reproduce the beha…

Sadly there was no resolution there.

These are my LDAP attributes:

These are my SAML attributes:

[laserjet25]

I’ll see if I can replicate the issue (might take a while). I don’t see why the users would mismatch in AZAD since they are synced directly form onprem. I would really be curios how may other people have this working as it might indicate something weird with how Zammad handles users.

[itkama]

Thanks, any help is welcome

[Seekinsj]

I also have started noticing this. My settings are the same as yours.

What I did notice for the three users that got a second user added, was that their email had capital letters in the name, but zammad does not see those capitals. I so FirstLast@email..com vs firstlast@email..com

I changed active directory to all lowercase, and that seems to have fixed the issue for those three users… but I am not really sure if that actually was the fix or not. Since it has only been three users.