Configuration Required setting Remarks; Attributes (or claims) NameID must contain the primary email address of a user in the Google Workspace or Cloud Identity account.: Any additional attributes are ignored. NameID format: urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress.