<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7VHPSA3Okta Classic EngineOkta Integration NetworkAnswered2018-09-05T01:29:14.000Z2017-06-15T18:57:19.000Z2017-06-15T18:57:19.000Z
Attribute Statement under Applications to change/override with Group
Hello all,

 

One of the Applications we use in our organization depends on Attribute Statements (Under a SAML Application) to send a value and based upon the content of this value, it separates a user into the application's own concept of groups.

 

However, after playing around with the Attribute Statements a little bit and a support ticket later, we figured that this is not a feature that has complete support (because, we are able to use statements but there seems to be some kind of limit that prohibits us from using complex Okta Expressions Lang here). Or may be I am missing something somewhere.

 

As an example, the following Attribute Statement which does only some of what we are trying to accomplish:

Name: orgGroup

Value: 

  1.  isMemberOfGroupName("okta-group-a") ? "group-a" : String.substringAfter(user.email, "@")
 Okta accepts the above statement as a valid expression and it works as intended.

 

However, it errors out when we try to add a little more complexity to it like:

Value:  
  1.  String.join( isMemberOfGroupName("okta-group-a") ? "group-a" : "", isMemberOfGroupName("okta-group-b") ? "some-random-string-b" : "" )
 Is there a known/recommended way to implement an override value for an Attribute Statement with respect to a certain group. Any help in this matter would be appretiated.

 

Thanks in advance for any help with this.

PS: I am new to this community so please pardon my lack on knowledge around this topic.

This question is closed.
Loading
Attribute Statement under Applications to change/override with Group