A user repeatedly fails SAML sign-in after a directory attribute change. Which approach best fits?

1. Verify identity mapping and relevant IdP and Workspace authentication events.
2. Compare effective service policy and inheritance for the affected unit.
3. Use Email Log Search with the relevant sender, recipient, and time range.
4. Check the Google Workspace Status Dashboard and correlate local symptoms.