<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00008i0Fe3CAEOkta Classic EngineSingle Sign-OnAnswered2024-04-17T13:31:30.000Z2023-01-23T15:59:14.000Z2023-01-24T15:49:06.000Z

9z78l (9z78l) asked a question.

Assigning User Attributes To Be Sent In The SAML Response Based On Group Attributes

I am trying to integrate Okta as an IdP for Auth0 which is acting as a service provider. As part of that, I wish to send a custom SAML attribute via the response that is sent to Auth0 for some user that tries to log in. I have managed to achieve that by setting the custom attribute and its value in the user profile. However, I am now trying to extend the solution to Groups in Okta. That is, I wish to be able to assign the same value for the same custom attribute for all users that are members of some group. I tried setting the same custom attribute and its respective value for some group, and assigned several users to said group.

I effectively wish for a user to "inherit" the attributes of groups where the user is a member.

Are there any steps that would allow this attribute to be automatically assigned to those users? Is this feature currently supported in Okta?


  • oktak.51509 (Customer)

    Managed to figure it out. Turns out that any attributes that are assigned to the group are then assigned to the appuser object which I reference in turn in the Attribute statements in the Application settings.Screen Shot 2023-01-24 at 17.45.55

This question is closed.
Loading
Assigning User Attributes To Be Sent In The SAML Response Based On Group Attributes