You see this error after signing in at your identity provider — the SSO connection is established but a required field isn't being passed through.
When you sign in with SSO, your identity provider (Okta, Google, Microsoft 365, OneLogin, etc.) sends Continu information about who you are — your email, your unique ID, and other attributes. Continu uses this information to match you to a user record. If a required field is missing or in an unexpected format, Continu can't complete the sign-in and shows the "identity provider is not providing the correct fields" error.
What's Required
Continu needs at minimum:
- Email address — must match a user record in Continu
- Unique identifier — typically the email or a separate unique ID like an Employee ID
- First name and last name — for the user's display
If any of these are missing from the SSO response, sign-in fails with this error.
How to Resolve (for the User)
This error isn't something you can fix yourself. The fix is at your identity provider configuration. Forward the error to your IT team along with:
- A screenshot of the error
- The time you tried to sign in
- Your work email address (so they can check the user record)
How to Resolve (for IT)
The fix is in the attribute mapping at your identity provider:
1. Open your SSO connection for Continu in your identity provider (Okta, Google Workspace, Microsoft Entra ID, etc.).
2. Review the attribute mapping for the SAML or OIDC response.
3. Confirm these are present and mapped:
-
emailorNameIDas the user identifier -
first_name/given_name -
last_name/family_name
4. Save the configuration and have the user try again.
If you need the exact attribute names Continu expects, contact Continu support for your organization's specific SSO configuration. SAML 2.0 and OIDC have different attribute conventions.
See Also
- Single Sign-On (SSO) Troubleshooting — full SSO troubleshooting reference.
- Signing In to Continu — sign-in methods overview.
This is a configuration issue at the identity provider, not in Continu. IT needs to fix the attribute mapping to include email, first name, and last name.