If you receive an "Oops" error when testing your newly created SAML SSO setup, it can indicate that the email attribute in the SAML assertion is wrongly configured or missing.
The SAML assertion must include an attribute called EmailAddress. Haiilo requires this attribute to identify the user who is logging in. Please note that EmailAddress must be written exactly as specified, as the attribute name is case-sensitive and should not contain any prefixes. The attribute should be displayed like this for EmailAddress (example from Google Admin):
This does not apply to Microsoft Entra ID. The EmailAddress attribute is not required for Entra ID. If you receive an Oops error for an Entra ID SSO setup, please reach out to our Customer Support team for assistance.