<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007HZnYvCALOkta Classic EngineSingle Sign-OnAnswered2024-03-25T05:59:51.000Z2021-11-12T14:40:18.000Z2021-11-15T16:18:04.000Z

om002 (om002) asked a question.

Group array functions in SAML attribute or profile mapping

I am looking to build a SAML attribute that can translate a group name based upon a pattern . So any group that begins with "G_APATTERN" would get translated to remove the G_APATTERN and just have the remainder as the value. The SAML attribute would then have a CSV list of those groups. I can easily do this in an OIDC claim but cannot find a way to do this in a SAML attribute. I am trying to use the Groups.startsWith along with the String.replace and Arrays.toCsvString functions. It looks like both the SAML attribute and the profile mapping does not support the Groups.startsWith functions. I can use the isMemberOfGroupNameStartsWith but that only returns a boolean and the getFilteredGroups requires hard coded group ids. Any suggestions are appreciated.


  • User15730825753913358305 (Vendor Management)

    Hello,

     

    Thank you for reaching out to us, if you have already tried using those expressions in a combination I'm not sure there is a way to properly make this expression work in the way you intend it to.

     

    In such situations, as you say isMemberOfGroupNameStartsWith is used more often than not.

     

    Thank you.

    Expand Post
This question is closed.
Loading
Group array functions in SAML attribute or profile mapping