Hey there,

I would appreciate getting help as part of Okta integration.

I’m trying to get the user group Ids as part of the SAML assertion response (after user authenticated) but all I could find in docs and forums are that only group names will be provided in the assertion…

Can I do that? Is this even supported?

I saw that I can only pick the key and filter according to some options against the group name but can’t control the value in group attributes:

As a workaround:

After the SAML assertion received in the client application:

I thought about using the groups API to fetch each group object (include id) using each group name (I’m getting from the assertion) but it’s a bad idea when you have lots of groups.

I thought about using the groups API to fetch all group objects (include ids) using the user id (I could get from the assertion) but it might getting me all user groups associated with the user and not with the user and the specific app.

Any solution? Any help will be appreciated..

Thanks