Invalid Name Id policy error in adfs single sign on

Hi there,

I’m trying to set up gitlab with adfs but I’m running into this error: Could not authenticate you from SAML because “The status code of the response was not success, was requester => invalidnameidpolicy”.

The config in the gitlab.rb file is:

Blockquote
name_identifier_format: ‘urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress’
Blockquote

The adfs rules have been set up in the manner suggested here: Troubleshooting SAML for ADFS | Single Sign-on and SCIM | ScreenSteps
We’ve also tried changing the outgoing claim type to transient as suggested elsewhere but continued to get the same error.

If anyone knows what I need to change to get this working or could point me towards the right setting that would be helpful.

The version of gitlab is 11.4.0 in case that’s useful.

Thanks,

Lucy