OIDC groups fro /userinfo only contain `Everyone`

Select Language

0D50Z00008C3jUzSAJOkta Classic EngineIntegrationsAnswered2024-03-25T20:58:47.000Z2018-06-11T08:46:59.000Z2018-06-28T14:53:09.000Z

y2mho (y2mho) asked a question.

We're attempting to use the Okta Org authorization server for an internal SSO implementation and we'd like to get the groups that users belong to.

We've added the Regex .* claim to the application but the groups from /userinfo only ever contain `Everyone`.

I'm aware that non-Okta groups will not appear here but my user is a member of several Okta native groups and these just aren't showing up.

Has anyone seen similar? What's up with it?

silviu.muraru1.494609885910873E12 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:30 AM
Hi,

My name is Silviu and I am a Technical Support Engineer (Tier II) at Okta.
Have you tried to use "getFilteredGroups" command as well? Instead of the "all" command for regex. It's an Array with the example: getFilteredGroups({"00gml2xHE3RYRx7cM0g3"}, "group.name", 40)
You can leverage it by using the docs here (https://developer.okta.com/reference/okta_expression_language/).
I would say that should do it, still you might need someone from Support looking at the configuration in a screen-sharing session, if not.
For any further assistance please open up a case with Okta Support and get all the necessary pieces of information, if not provided yet.

Wish you all the best in your work, Mike!

Thank You,
Silviu Muraru
Technical Support Engineer | Okta Inc.
Expand Post
y2mho (y2mho)
8 years ago
Thanks for your answer Silviu. I thought that getFilteredGroups is only availabe if you're using the Okta API Access Management SKU? We don't have that SKU as we're only trying to build out a simple SSO gateway and this app would be the only consumer.
Expand Post

This question is closed.