This article will show how to obtain the group ID and group from an enrollment policy using API calls.

• Okta Groups
• API
• Postmen

Sample Scenario: If an Okta org has multiple AD domains, it is possible that each domain will contain groups such as "Domain Users" and "Domain Admins" imported into Okta. After adding, for example, the "Domain Users" group to an Okta Multifactor policy, it is difficult to know which domain the group belongs to, as the policy interface does not show a group's domain information.

Requirements:

• Setup Postmen
• Add the Policy and Groups Collection

To get group IDs of all the groups added to a Multi-Factor Enrollment policy, please use the following enrollment policy API call:

 

Example response:
 
They can use the obtained group IDs to identify the groups added to the enrollment policy. To do so:

1. Navigate to Directory > Groups.

2. Open any random group.

3. Replace the Group ID in the URL with one obtained by the API call to open MFA enrollment group information. The method allows for the determination of the domain to which the group belongs, as described in the sample scenario.