The Okta Workflows Search Group Rule card returns multiple or unexpected results when searching for a specific group rule name. This occurs because the card acts as a wrapper for the group rules API, which searches for keywords across the rule name, expression conditions, and group assignments rather than performing an exact match on the name alone. Resolve this behavior by adding a filter card to the flow to isolate the exact group rule name.
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Okta Workflows
- Search Group Rule Card
The Search Group Rule card acts as a wrapper for the Lifecycle Management (LCM) API for group rules. The search function executes a keyword search rather than an exact string match. When using options like First Matching Record, or First 200 Matching Records, the API searches for the provided keywords across the Name, Expression Conditions, and Group Assignments fields. Because the search evaluates individual words rather than the complete phrase, Okta Workflows returns any rule containing one or more of the search terms. Consequently, even the First Matching Record option returns an unexpected group rule depending on the surrounding data.
For Example, when selecting First Matching Record on the Search Group Rules card, and trying to search "Okta Senior Technical Engineer", this card returns:
Since the Search Group Rule card relies on the List all group rules API, it does not search exclusively by the group rule name. Process the returned list with a filter card to isolate the exact group rule name.
- Use the Search Group Rule card to return the list of potential matches using First 200 Matching Records or Stream Matching Records, depending on how many Group Rules are configured.
- Add a Filter or Find card to the flow to process the returned list.
- Configure the filtering card to perform an exact match against the group rule name field.
