<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content

When a User is Assigned to an App through Multiple Groups, they Only Inherit the Profile from One of the Groups and Not from All

Okta Classic Engine
Okta Identity Engine
Administration

Overview

When a user is assigned to an app through multiple groups, they only inherit the profile from one of the groups and not all.

Applies To

  • Applications

  • Groups

Cause

An app will have an Assignment tab where users and groups can be assigned the app. When groups are assigned to the app, there will be a column for the priority.  The higher the group is in the list, the higher it is in the priority.  The user will inherit their profile from whichever group they are a member of that is highest in priority.

Solution

This is expected behavior. However, some attributes in the profile can be combined across multiple groups assigning the app. Go to the Profile Editor and edit an array attribute in the profile for the app. There will be a configuration item for "Combine values across groups".
Loading
Okta Support - When a User is Assigned to an App through Multiple Groups, they Only Inherit the Profile from One of the Groups and Not from All