As the LDAP attribute claim being sent by Active Directory Federation Services in the current configuration is email address, Active Directory Federation Services sends the user email address as a SAML assertion attribute:<AttributeStatement>
<Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress">
<AttributeValue>testuser</AttributeValue>
</Attribute>
</AttributeStatement>You must specify this attribute when configuring SAML authentication on System Manager.