Breadcrumbs

SAMLEmailIDType: Controlling Username Format for SSO Authentication

Last Updated: October 23, 2026

The SAMLEmailIDType key controls how the D3 system matches usernames during single sign-on (SSO) authentication with a SAML identity provider. It determines whether the system uses the full email address or only the local-part (portion before the "@") from the SAML username to identify the user's D3 account.

Navigating to the SAMLEmailIDType Key

  1. Go to Global Settings > Application Settings, and select Web Config (under Feature Settings).

    wc-01-web-config.png

  2. Scroll down the Web Config panel on the right until SAMLEmailIDType appears. Select True or False. The text under the key describes each value.

    The SAMLEmailIDType key in Web Config with its True and False options and its description

Accepted Values

  • true

  • false


Behavior

SAMLEmailIDType

Username Match Behavior

D3 vSOC Login Page Username

false

Matches the full email address.

demo@d3security.com

true

Matches the portion of the email before "@".

demo
Accessing the Identity Provider's Authentication Portal

Users begin the login process by submitting their full D3 vSOC username on the D3 vSOC login page.

READER NOTE

Redirection to the identity provider's authentication portal occurs only when the following two conditions are met:

At the redirected identity provider authentication portal, users are prompted to enter their SAML credentials.

Frame 5 (23)-20250506-185641.png

Upon authentication, this email—either in its full form (e.g., support@d3soar.com) or in its local-part form (e.g., support), depending on the SAMLEmailIDType setting—is used by D3 to match against the usernames listed under Global Settings > Organization Management > Users (the Username column). Access is granted if a corresponding match is identified.

RELATED ARTICLES