# OOD 1.8 and SAML2 and ADFS authentication

**URL:** <https://discourse.openondemand.org/t/ood-1-8-and-saml2-and-adfs-authentication/1137>\
**Category:** Get Help\
**Tags:** question\
**Created:** [September 28, 2020, 7:27pm UTC](https://discourse.openondemand.org/t/ood-1-8-and-saml2-and-adfs-authentication/1137 "2020-09-28T19:27:40Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![bp85](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/bp85/32/640_2.png) [@bp85](https://discourse.openondemand.org/u/bp85)\
**Post date:** [April 22, 2021, 10:53pm UTC](https://discourse.openondemand.org/t/ood-1-8-and-saml2-and-adfs-authentication/1137/9 "2021-04-22T22:53:45Z")

</div>

Hi @jeff.ohrstrom,

Took really long time than expected, but I can confirm that creating metadata after swapping both ARG is working.

From my experience, most users would need this [workaround](https://discourse.openondemand.org/t/forcing-lowercase-username-after-login/491/4) as most ADFS systems return Attributes like “sAMaccountName” which is case-insensitive where as unix won’t like it.  
Perhaps adding a section in the [page](https://osc.github.io/ood-documentation/master/authentication/adfs-with-auth-mellon.html) with above info might help others.

Initially I configured SSSD to be case-insensitive, which didn’t work all the way (logs suggest my login was successful) because nginx failed to get lock on socket which is expected because PUN is started as REMOTE\_USER.

---

_[View the full topic](https://discourse.openondemand.org/t/ood-1-8-and-saml2-and-adfs-authentication/1137)._