Email address related error after configuring SAML (Okta)

[Identity Seeker]

We turned on SAML for our account and it seems something is not working at the Atlassian end. After Okta authentication Okta is re-routing to Atlassian however Atlassian errors by giving the following error.

Whoops! The address you entered doesn't seem to be a valid email address. Try checking your email address with your organization admin."

I know i am typing in the right e-mail address.

Is there something Atlassian has to do to "move" Atlassian managed accounts to SAML ?

[Ankit · Accepted solution]

Hi Ajay,

You don't need to move the accounts to SAML. It works automatically.

Since you're being redirected for SAML SSO with Okta, you must be entering the right email address, but the value coming in from Okta might be mismatching.

I think Atlassian Access picks up the NameID value from SAML assertion. You'll need to check if that value has the correct email address. To check this value you can use SAML Tracer, or you can upload it here using these steps so I can check it:

1. Download SAML tracer add-on : Firefox [ Link ] | Chrome [ Link ]

2. Open the SAML tracer from the Browser toolbar

3. Keep the SAML tracer window open

4. Reproduce the issue.

5. Go to SAML Tracer window

6. Click on export. Select None as cookie-filter-profile

7. Select the destination for the exported file and send me that file.

Hope this helps.

Thanks,

Ankit