<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7UrCSAVOkta Classic EngineOkta Integration NetworkAnswered2024-07-22T09:15:32.000Z2017-04-24T15:34:24.000Z2020-10-16T14:08:13.000Z
  • Hi Angela,

     

    For a custom Saml application you can add "Group Attribute Statements" and pass them through the assertion. 

    You can add them by going to Admin > Applications > Your Application > General > Click Edit next to "SAML Settings" > Click Next and now add the attribute on the "Group Attribute Statements (optional)".

     

    Thank You,

     

    Eugen Dumitru

    Technical Support Engineer

    Okta Global Customer Care
    Expand Post
  • qsldk (qsldk)

    Hi Eugene, Is there any documentation on How to complete the fields? For example what value is used in the Name field? The filter appears to be your group information specifically. Best Regards, Angela Craghead Guardian Industries Corp. | Guardian Central 2300 Harmon Rd. Auburn Hills, MI 48326 P. 248.340.0013 | acraghead@guardian.com
  • Adam B (Customer)

    Name is the attribute name you wish to reference. "group" or "role" is common, but it depends on what your service provider is looking for. If you had a bunch of roles as "appname-role" in AD and you need to send that value as "role" you would enter in "role" on the left, and "appname" on the right.

  • jijht (jijht)

    More specifically...  We have a number of applications that require all the AD groups a user is a member of in the assertion.   Given the filter requirement/option it doesn't seem possible to pass all of the groups a user is a member of using a single function or statement.
  • OktaU.83617 (Florida Cancer Specialists)

    Has anyone found where to push ALL groups like Daniel asked?

  • EdG.33624 (Customer)

    Hi Eric, I tried that too. I cannot see it reflected in the XML file. are you? how is it should look like?

  • JoshS.48371 (Customer)

    The following seems to work for me:

     

    Matches regex

    Value = (.*)

     

    Capturew

This question is closed.
Loading
Can you pass group membership as part of the SAML assertion to the SP ?