3dl5q (3dl5q) asked a question.
2 different attribute requirements in the same app
Hi there,
Would it be possible to assign 2 groups to an app with the requirements being that 1 of the groups have a custom attribute but the other group does not have that attribute?
We use Miro which allows for a user to be assigned a full license by using the userType=Full attribute but if you want someone to use a Guest license then you should not use the userType attribute at all. Hence the one group with the custom attribute and one group without it.
I've seen an alpha feature called "override app mapping" dont know if this can help
Hello @3dl5q (3dl5q) Thank you for reacting out to our Community!
You can add groups with multiple/different attributes to one application to work as you intend, however the group users should be different. If you use the same users for both groups then the user will inherit the attribute from the first group in the app assignment they he is part of.
Community members help others by clicking Like or Select as Best on responses. Try it today.
Watch and Learn: New Okta how-to videos, plus what's new this month in the May newsletter.
Hi @Paul S. (Okta, Inc.) thanks for your response. The requirement for the second group would be that the attribute of the first group is not even present as a selection option in the second group. Remember passing the userType custom attribute at all in this case would cause an issue. The second group should not even have a null or blank value for userType, it should just not pass that attribute at all.
In this case this would not be an option if when assigning a group has that attribute present.
In this case this would be a feature request. you can add a Feature Request on our Idea section, for a chance that this functionality to be added in the future.
https://support.okta.com/help/s/ideas