Choose what SAML sends as a login hint
- Category
- SAML
- Published
Configure each SAML connection to send an email address, a custom attribute, or no login hint to your identity provider.
You can now control the identifier Clerk sends to your identity provider (IdP) when a member starts a SAML sign-in. Configure the Login hint section on each SAML connection in the Clerk Dashboard:
- Email address sends the member's email address. This is the default for named SAML providers.
- Custom attribute sends the value of a custom attribute that you select on the connection. Use this when your IdP identifies members with an employee ID, username, or another value instead of their email address.
- Off sends no login hint.
Custom SAML connections don't send a login hint until you select Email address or Custom attribute. Existing named SAML connections keep their email-address behavior unless you change the setting.
For setup steps and details about custom attributes, see the SAML login hint documentation.