Hi,

There seems to be a limitation in Salesforce when creating Contacts via its JIT provisioning mechanism for Customer Community Portal User. I am quite sure that I've sent over all the necessary SAML attributes for it to work but I am getting an error:

https://na10.salesforce.com/_nc_external/identity/saml/SamlError?ErrorCode=5&ErrorDescription=Unable+to+create+user&ErrorDetails=INVALID_CROSS_REFERENCE_KEY+ContactId+Api+Exception%3A+Cannot+create+a+portal+user+without+contact

I've followed the online documentation quite thoroughly and also simply tried sending an exhaustive combination of attributes but no luck. It seems that whatever combinations of Account/Contact/User fields that were used in SAML Attribute Statement file won't be enough for Salesforce to initiate creating Contact + User.

Reference: https://developer.salesforce.com/blogs/developer-relations/2014/06/how-to-provision-salesforce-communities-users.html