Breadcrumbs

SAMLEmailIDType: Controlling Username Format for SSO Authentication

last updated: February 12, 2026

The SAMLEmailIDType key controls how the D3 system matches usernames during single sign-on (SSO) authentication with a SAML identity provider. It determines whether the system uses the full email address or only the local-part (portion before the "@") from the SAML username to identify the user's D3 account.

Navigating to the SAMLEmailIDType Key

  1. Navigate to Configuration > Application Settings > Web Config.

    Frame 1 (21)-20250502-224950.png

  2. Scroll down the panel on the right-hand side until SAMLEmailIDType appears.

    image-20250502-225141.png

Accepted Values

  • true

  • false

Default Value

false

Behavior

SAMLEmailIDType

Username Match Behavior

D3 vSOC Login Page Username

false

Matches the full email address.

demo@d3security.com

true

Matches the portion of the email before "@".

demo
Accessing the Identity Provider's Authentication Portal

Users begin the login process by submitting their full D3 vSOC username on the D3 vSOC login page.

READER NOTE

Redirection to the identity provider's authentication portal occurs only when the following two conditions are met:

At the redirected identity provider authentication portal, users are prompted to enter their SAML credentials.

Frame 5 (23)-20250506-185641.png

Upon authentication, this email—either in its full form (e.g., support@d3soar.com) or in its local-part form (e.g., support), depending on the SAMLEmailIDType setting—is used by D3 to match against the usernames listed under Configuration > Organization Management > Users > Username. Access is granted if a corresponding match is identified.

RELATED ARTICLES