Hello,

I want to send group attributes to a SAML application. I have users in okta with groups in the following format:

123445*team-admin*123234

123445*team-readonly*123234

123445*team-audit*123234

User 1 is a member of team-admin, team-readonly and team-audit, but i only want to send the group team-readonly

I tried the following on the Group Attribute Statements:

Option 1

Name: read-only

Name Format: unspecified

Filter:

matches-regex .*team-readonly*.*

Option 2

Name:read-only

Name Format:unspecified

Filter: isMemberOfGroupNameRegex(.*team-readonly*.)

Option 3:

Name:read-only

Name Format:unspecified

Filter:

Groups.contains("idsol-org-readonly")

None of these options result in anything on the SAML Assertion, however if I just input:

Name:read-only

Name Format:unspecified

Filter: .*

Then i get all the groups the user is in. I need help, i checked the documentation but i do not understand how to only send a specific group