Limit for IDP Config Group Filter

The Group Filter was tested with over 5k Groups and could still add groups. There does not look to be a limit nearby, but we know at least that the limit is way over 5k.

• IDP
• Group Filter
• IDP Group Assignment

1. Over 7k groups were created via API and assigned to the Group Filter in an IDP config.
2. The limit for our tests was the API call that was not accepting more than 5372 Groups, but we were able to add more groups manually. We can say for sure that the limit for this is over 5372 Groups.
3. The groups were created using a runner in Postman similar to the one in the article below:

How to Bulk Create Groups Using Postman API

4. After group creation, export the groups in a CSV and use Google Sheets to make the right format for an API call(adding "id",). This was achieved by using Google Sheets

=CHAR(34)&A1&CHAR(34)&CHAR(44)

5. To assign groups in bulk to the IDP config, I used:

GET {{url}}/api/v1/idps/{{idpid}}

6. Copy the answer's content >> Insert the content in the body of the same call >> Change the call to PUT.
7. Insert the ids with the format "id", in the call. Run the call. This should assign all the groups to the IDP added above.

PUT {{url}}/api/v1/idps/{{idpid}}

{
    "id": "0************",
    "name": "From Classic Org",
    "status": "ACTIVE",
    "created": "2024-03-15T14:14:30.000Z",
    "lastUpdated": "2024-04-04T08:41:00.000Z",
    "protocol": {
        "type": "SAML2",
        "endpoints": {
            "sso": {
                "url": "https://<domain>.okta.com/app/okta_org2org/*****************/sso/saml",
                "binding": "HTTP-POST",
                "destination": "https://<domain>.okta.com/app/okta_org2org/*****************/sso/saml"
            },
            "acs": {
                "binding": "HTTP-POST",
                "type": "INSTANCE"
            }
        },
        "algorithms": {
            "request": {
                "signature": {
                    "algorithm": "SHA-256",
                    "scope": "REQUEST"
                }
            },
            "response": {
                "signature": {
                    "algorithm": "SHA-256",
                    "scope": "ANY"
                }
            }
        },
        "settings": {
            "nameFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
            "honorPersistentNameId": false
        },
        "credentials": {
            "trust": {
                "issuer": "http://www.okta.com/**************",
                "audience": "https://www.okta.com/saml2/service-provider/***************",
                "kid": "97a0cf85-d5e6-4d9f-82c3-2fb85fdffacc",
                "revocation": null,
                "revocationCacheLifetime": 0
            },
            "signing": {
                "kid": "2Ur1SFVrofR4CnSrKXcwkhrkMV90u0VFTRxRx5Ay8Go"
            }
        }
    },
    "policy": {
        "provisioning": {
            "action": "AUTO",
            "profileMaster": false,
            "groups": {
                "action": "SYNC",
                "sourceAttributeName": "profile.something",
                "filter": [
                    "00ga9mniejCszHuj75d7",
                    "00gg832ewcckvqEmB5d7",
                    "00gg832eweOfUexie5d7",
                    "00gg833cg5gLm5Bxj5d7",
                    "00gg833e62tfE1x145d7",
                    "00gg833ksxoZSrwkQ5d7",
                    "00gg833o02LxmUQp55d7",
                    "00gg8340g7tREjIvo5d7"
                ]
            },
            "conditions": {
                "deprovisioned": {
                    "action": "NONE"
                },
                "suspended": {
                    "action": "NONE"
                }
            }
        },
        "accountLink": {
            "filter": null,
            "action": "AUTO"
        },
        "subject": {
            "userNameTemplate": {
                "template": "idpuser.subjectNameId"
            },
            "filter": "",
            "matchType": "USERNAME",
            "matchAttribute": null
        },
        "maxClockSkew": 120000,
        "mapAMRClaims": false
    },
    "type": "SAML2",
    "_links": {
        "metadata": {
            "href": "https://xxxxxxxxx.okta.com/api/v1/idps/0oaftc94vgHYPYxku5d7/metadata.xml",
            "type": "application/xml",
            "hints": {
                "allow": [
                    "GET"
                ]
            }
        },
        "acs": {
            "href": "https://<domain>.okta.com/sso/saml2/0oaftc94vgHYPYxku5d7",
            "type": "application/xml",
            "hints": {
                "allow": [
                    "POST"
                ]
            }
        },
        "users": {
            "href": "https://<domain>.okta.com/api/v1/idps/0oaftc94vgHYPYxku5d7/users",
            "hints": {
                "allow": [
                    "GET"
                ]
            }
        },
        "deactivate": {
            "href": "https://<domain>.okta.com/api/v1/idps/0oaftc94vgHYPYxku5d7/lifecycle/deactivate",
            "hints": {
                "allow": [
                    "POST"
                ]
            }
        }
    }
}