Examples of errors:
- Unable to validate assertion: email must be a well-formed email address.
- Unable to validate assertion: email must not be blank.
- Unable to validate assertion: name must not be blank.
If you see the “Unable to validate assertion” error when setting up SSO or logging in to your account, it typically means the attributes were incorrectly mapped in your identity provider.
To resolve this, we recommend verifying that the mapping of all LDAP attributes and the outgoing name ID format are set correctly.
Grammarly supports the following name ID format: EmailAddress
The required attributes/claims:
- EmailAddress
- FirstName
- LastName
Note: The names of attributes/claims must follow the specified format. Alternative name spellings or FriendlyNames are not supported.
For more information, please see this article: Add Grammarly to an identity provider