Unable to Get Attributes in SAML Response (Zoom Integration)

[pradeepkumarteel]

Hi @tngan,
I'm integrating samlify (v2.10.1) with Zoom as a SAML Service Provider and have run into a problem that’s made the integration difficult. I’d appreciate any guidance or clarification.

Problem: Attributes Missing from SAML Response
Despite providing attributes via the user object in idp.createLoginResponse(...), the generated SAML Response does not contain a <saml:AttributeStatement> section at all.

Even after supplying the user attributes via the user object in idp.createLoginResponse(...), the generated SAML response does not include a <saml:AttributeStatement> section.

According to the docs, we need to use a custom loginResponseTemplate, with a context key (for the full XML) and an attributes array (to define attribute mappings). However, this feels like unnecessary overhead for a very common use-case. At least redifining the context should be optional.

For example, instead of this verbose setup:

const idp = saml.IdentityProvider({
  // ...
  loginResponseTemplate: {
    context: '<samlp:Response ...>',
    attributes: [
      {
        name: "mail",
        valueTag: "user.email",
        nameFormat: "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
        valueXsiType: "xs:string"
      },
      {
        name: "name",
        valueTag: "user.name",
        nameFormat: "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
        valueXsiType: "xs:string"
      }
    ]
  }
});

It would be much simpler and more intuitive if we could just define the attributes like this:

const idp = saml.IdentityProvider({
  // ...
  attributes: [
    {
      name: "mail",
      valueTag: "user.email",
      nameFormat: "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
      valueXsiType: "xs:string"
    },
    {
      name: "name",
      valueTag: "user.name",
      nameFormat: "urn:oasis:names:tc:SAML:2.0:attrname-format:basic",
      valueXsiType: "xs:string"
    }
  ]
});

Request

• Is there a more straightforward way to include attributes in the SAML response without fully replacing the response template?
• If using loginResponseTemplate is the only supported method, could you please provide a minimal working example that demonstrates how to correctly include attributes?