KevinB.26188 (Customer) asked a question.
Hi, I'm trying to map a user's okta groups into a SCIM attribute that needs to be a comma separated list of roles. I can handle doing the mapping of group name -> role name but I'm having trouble getting a list of the user's okta groups in the mapping.
The closest I've found is this: https://support.okta.com/help/s/question/0D50Z00008G7Vcm/comma-separated-group-attribute-statement-to-sp
but I really don't want to have to hard code every possible group and check with isMemberOfGroupName.
Groups.startsWith would be perfect for my use case, but for some reason it's not available in mappings where I want it. getFilteredGroups is close but you need the list of group ids to check, which again I'd rather not have to hard code.
Does anyone know a clean way to do this?
Hi Kevin,
Unfortunately there is no easier way to do it at this moment, since these group functions are designed to work only with group claims and cannot be used with property mappings as you can see in the documentation below:
https://developer.okta.com/docs/reference/okta-expression-language/#group-functions
You can suggest this on the Okta Community portal by using the 'Feedback' option at the bottom of the Okta admin console. Features suggested in our community are reviewed and can be voted and commented on by other members of the community, therefore making it much easier for the engineering team to understand the priorities that you have for feature requests. From there, the PM team will review the top 30 most voted upon ideas each month and provide feedback/roadmap status on these via the forum.