ChrisS.79495 (LHC Group) asked a question.
Filter Groups in SAML Assertion by Description
I am attempting to filter the groups that we send to an application and can't find a way to get what I want. We are integrated with AD and the groups that import have their full location in their description. Is there a way to filter groups with RegEx based on their description? For example:
We have 3 groups:
- domain.com\user groups\read only
- domain.com\user groups\super user
- domain.com\admin groups\supervisors
The filter only appears to be able to work against the last part of these groups. So "Starts With" "s" would get super user and supervisors. "Starts With" "domain.com\admin groups" returns nothing but I'd want it to return supervisors.
Hello @ChrisS.79495 (LHC Group)
Thanks for posting.
Please refer to the following threads as they might help you:
https://devforum.okta.com/t/group-attribute-statement-regex-filter/6263
https://support.okta.com/help/s/article/How-to-send-certain-groups-that-the-user-is-assigned-to-in-one-Group-attribute-statement?language=en_US
For more specific details applied to your specific use case feel free to post this question on our Okta Developer Forums: https://devforum.okta.com, this is a place for the Okta developer community to interact.
Let us know if this helps you.
Daniela Chavarria.
Okta Inc.
Hi @User1630709688426468638 (Okta) those don't help unfortunately. They both address filtering on the group name and not the description. Please see the example after the 3 made up groups I listed.