<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7V3ISAVOkta Classic EngineOkta Integration NetworkAnswered2024-04-30T09:18:25.000Z2018-01-31T19:48:14.000Z2018-02-11T20:36:32.000Z

f0q2f (f0q2f) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM
How to return groups in the SAML assertion
Hello I was originally writing a question to ask how to add groups to the SAML assertion payload. After a few hours of banging my head I took it to stack overflow and was able to find the answer there: https://stackoverflow.com/questions/35893311/getting-list-of-groups-user-is-associated-with-in-okta .

 

This is more FYI that the documentation is hard to navigate and the answers that exist are very vague for example: 

 

https://support.okta.com/help/answers?id=9062A000000bmh3QAA&feedtype=SINGLE_QUESTION_DETAIL&dc=Okta_Application_Network&criteria=OPENQUESTIONS&

 

  • 2 answers
  • 16.74K views
j5v7c likes this.

  • valeriu.hudea1.5051426125598904E12 (Okta, Inc.)

    Hey Gus, 

     

    Good day.

    The stack article sums up how to scope a group from the Apps SAML Group Attribute Statements , the example provided is to scope out groups containing the Admin value , the response you will get with the assertion , you could scope other group attributes as well ex. roles , If your org supports a large number of groups, use this option to filter them into a single SAML assertion. Filtering options include Starts With, Equals, Contains, and Regex expressions. Our expression language may offer more information on statements and custom mappings if there is a more complex attribute implementation:  https://developer.okta.com/reference/okta_expression_language/?_ga=1.36304032.1831648392.1517430269  

    https://developer.okta.com/docs/api/resources/groups#group-type 

    We have diferent sources for documentation, some may indeed need an update and recent atention, by expanding the search you will get the answer. 

    Wish you a wonderful day. 

     

    Best Regards
    Expand Post

  • j5v7c (j5v7c)

    Hello,

     

    Thanks for posting your inquiry in Okta Community Portal.

     

    ​If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer." 

     

    Thank you,

     

    ​Dylann Fezeu

    Okta Help Center Team
    Expand Post
This question is closed.
Loading
How to return groups in the SAML assertion