SAML Login not working with Authentik

[TheEndOfEverything]

Infos:

• Used Zammad version: 6.4.1-1740652408.e0e2155d.bookworm
• Used Zammad installation type: Proxmox LXC
• Operating system: Debian 12 (container); Proxmox 8.3.3 (hypervisor)
• Browser + version: Mullvad Browser 14.0.5 (based on Mozilla Firefox 128.7.0esr); Chromium 133.0.6943.141

---

I am trying to set up SAML login with Authentik. I have followed the official instructions on the Authentik Wiki, but there are two issues:

1. The Name Identifier Format field, which I apparently should leave blank, is a mandatory field.
2. I put the phrase “empty” into the field, in case the guide was more literal than I thought. With this configuration, I get the following error:
   
   

[BlakeAvery]

Here’s what I’ve got for my Zammad SAML Provider for the mappings and NameID Property Mapping.

The Zammad SAML mappings just return the relevant attributes from Authentik for the user, and are set up per the Zammad/Authentik docs. Lemme know if setting these helps out or if you’re still experiencing issues.

[TheEndOfEverything]

Interesting. The Authentik guide didn’t say to have first_name or last_name mappings.

[BlakeAvery]

That’s true, name and email mappings are all that is required. Zammad itself supports the first name and last name mappings; my Authentik users have said attributes so I figured why not map them.
I can confirm my setup was working as intended before I mapped first and last names, though.