Use these steps to configure custom attribute claims in an Okta SAML single sign-on (SSO) integration so they match Cube’s required configuration.

These steps are completed on the customer’s Okta SAML settings—not in Cube.

Set Custom User Attribute Claims

1. In Okta, go to Applications > Your App > Single sign-on > SAML.

2. Scroll to User Attributes and Claims.

3. Remove any default claims you don’t need.

   • Default claims often include a http:// namespace.

   • For Cube, remove all claims listed under Additional claims before continuing.

4. Select Add new claim.

5. Set Name to the exact claim name required.

   Examples

   • User.FirstName

   • User.LastName

   • User.EmailAddress

   • emailaddress

6. Clear the Namespace field completely.

   • The namespace must be blank.

   • If left populated, Okta automatically adds a http://schemas... value, which can cause the claim to fail.

7. Set Source to Attribute.

8. Map the claim to the correct Okta user attribute.

   Example mappings

   Claim name	Okta user attribute
   User.FirstName	user.givenname
   User.LastName	user.surname
   User.EmailAddress	user.userprincipalname
   emailaddress	user.mail

9. Select Save.

10. Repeat these steps for each required claim.

Result

Your Okta SAML configuration now includes the custom attribute claims required for Cube authentication.

If users are unable to sign in after setup, confirm that each claim name matches exactly and that all namespaces are blank. Cube Support can help validate your configuration if needed.