Environment
Symptoms
Okta SAML logins fail after the console was upgraded to version 8.5+
Cause
Starting with version 8.5+ the login page won't accept SAML assertion that has the user's email as both the NameID and the 'EmailAddress' attribute
Resolution
Within the Okta configuration page please remove the 'EmailAddress' attribute, so that only the NameID passes the user's email address
Related Content