oauth attributes missing

[BeckYeh]

I used dex with AWS iam identity center saml2 as oauth solution

But I don't know what attributes I miss, because after kafk-ui get dex information than redirect to aws page.
will get 403 error when api call.

My attributes settings in AWS iam identity center like below：

SAML attributes	mapping value
Subject	${user:subject}	unspecified
name	${user:name}	unspecified
groups	${user:subject}	unspecified
given_name	${user:givenName}	unspecified
family_name	${user:familyName}	unspecified
email	${user:email}	unspecified

if someone know the reason please let me know.

[BeckYeh]

fix this issue

the mapping need this

subject ${user:subject} unspecified

and dex need to set nameIDPolicyFormat: unspecified