Answer
If you're encountering an "Invalid Account" error, follow these steps to troubleshoot.
Go to the Foxit Admin console, and check the sync source attribute.
If you choose email, you need to set the email to "user.mail" in the Azure portal. Please see the following steps for details:
1. Go to Azure AD admin center, and select Enterprise applications.
2. Select the application that you added for the Foxit Admin console and open it.
3. Select Single sign-on, and then choose SAML to check Attributes & Claims.
4. Check if the email is set to 'user.mail'
5. Please note that if the email is set to "user.mail", please confirm that the email entry is the user's email account and is correct.
User principal name
If you choose 'User principal name', you need to set the email to "user.userprincipalname" in the Azure portal. Please see the following steps for details:
1. Go to Azure AD admin center, select Enterprise applications.
2. Select the application that you added for Foxit Admin console and open it.
3. Select Single sign-on, and then choose SAML to check Attributes & Claims.
4. Check if the email is set to 'user.userprincipalname'
Note that the Editor uses the email account to log in, so please confirm that the user principal name item is the email account.
If the above information hasn't been helpful, please try the following solution.
The main cause for the persisting error is if the Namespace URI is not blank.
This conflicts with the UPN calling to the Admin Console for proper username login. Removing the Namespace in the attribute claim should allow the users to activate it properly. Thanks.
Solution 3
This issue could also be caused by incorrect values entered under Attributes & Claims. Please verify if all the claim names and their values are in lowercase rather than uppercase especially for email claim.
Hope this article can help you. If you still have questions or comments about SSO login, please contact Foxit support (via creating a support ticket) for further assistance. Thank you.