[Solved ]Bookstack SAML display name attributes not set correctly | authentik | Page 1

true echo Oct 27, 2022, 6:28 PM

#

Hey, got bookstack setup with SAML and so far it's been working great. However we recently had a new user setup in authentik and when they logged in to bookstack for the first time I would expect their name to be their authentik name atribute, as in the bookstack configuration the following is set: SAML2_DISPLAY_NAME_ATTRIBUTES=Name, however it gets set to their email, which makes it a bit weird seeing as bookstack already saves their email separately 😛

Not sure if this is a configuration error on the SAML provider side or bookstack side. The setup is identical to the one in the bookstack integration documentation.

crisp idol Oct 27, 2022, 9:58 PM

#

it might be an issue fixed by this commit: https://github.com/goauthentik/authentik/commit/6ea57921f256a45583c602b539e69d4fa9a901d2

GitHub

sources/saml: set username field to name_id attribute · goauthentik...

Signed-off-by: Jens Langhammer

#

you will need to wait for the next release and upgrade to benefit from this fix

true echo Oct 28, 2022, 12:04 PM

#

Doesn't look like it, since that has to do with the username attribute, this is the name attribute

crisp idol Oct 28, 2022, 12:09 PM

#

You are right, I misread your initial message, furthermore the linked issue is related to SAML as a source and not as a provider, sorry for that

true echo Oct 28, 2022, 12:15 PM

#

No worries, glad that someone tried to help 😄

crisp idol Oct 28, 2022, 12:32 PM

#

what value do you have in SAML2_EXTERNAL_ID_ATTRIBUTES?

#

also which property mappings are select in your saml provider configuration?

true echo Oct 28, 2022, 1:16 PM

#

The external id attribute is uid

#

And all mappings are selected on the provider

#

It's setup exactly according to this https://goauthentik.io/integrations/services/bookstack/

Bookstack | authentik

Support level: Community

crisp idol Oct 28, 2022, 1:29 PM

#

that's odd because the display attribute should be http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

#

I am looking up bookstack source code to see how attributes are matched

#

@true echo could you try with SAML2_DISPLAY_NAME_ATTRIBUTES=http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name?

true echo Oct 28, 2022, 1:51 PM

#

Will do when I get home, cheers for looking into it 😄

true echo Oct 31, 2022, 12:07 AM

#

Sorry for not trying this earlier, life got in the way. But it worked perfectly! Thank you very much @crisp idol

crisp idol Oct 31, 2022, 12:16 AM

#

Could you open a MR or an issue in authentik repository so the documentation could be corrected?

true echo Oct 31, 2022, 12:17 AM

#

Oooh, good point!

#

Yea, will do

#

It's already on there at the bottom even 😛 Under notes

#

Should've caught it earlier I guess xD

#

Anyway, many thanks for the help! 😄

#[Solved ]Bookstack SAML display name attributes not set correctly