From 063e1107eeaf3f8629237322e72b597d2a883306 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89mile=20R=C3=A9?= <emile@getprobo.com>
Date: Fri, 13 Feb 2026 18:59:07 +0400
Subject: [PATCH] set SAMLSubject on create
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Émile Ré <emile@getprobo.com>
---
 pkg/iam/saml/service.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/iam/saml/service.go b/pkg/iam/saml/service.go
index 205f2aeb4..210f18a7f 100644
--- a/pkg/iam/saml/service.go
+++ b/pkg/iam/saml/service.go
@@ -261,6 +261,7 @@ func (s *Service) HandleAssertion(
 				*identity = coredata.Identity{
 					ID:                   gid.New(gid.NilTenant, coredata.IdentityEntityType),
 					EmailAddress:         email,
+					SAMLSubject:          &assertion.Subject.NameID.Value,
 					FullName:             fullname,
 					HashedPassword:       nil,
 					EmailAddressVerified: true,
@@ -275,7 +276,6 @@ func (s *Service) HandleAssertion(
 			} else if err != nil {
 				return fmt.Errorf("cannot load identity: %w", err)
 			} else {
-				identity.SAMLSubject = &assertion.Subject.NameID.Value
 				identity.EmailAddress = email
 				identity.FullName = fullname
 				identity.EmailAddressVerified = true