<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009iasDtCAIOkta Classic EngineSingle Sign-OnAnswered2024-04-16T12:27:29.000Z2023-10-02T21:47:51.000Z2023-10-31T22:03:17.000Z

o7fzo (o7fzo) asked a question.

Creating comma separated list of groups for SAML integration

An application we are trying to integrate with using SAML requires all of the related groups to be sent in a single attribute statement as a comma separated list. There are two sets of groups that need to be included:

 

ABC_*

XYZ_*

 

So for example, the attribute statement would need to contain something like: "ABC_One,ABC_Two,XYZ_One"

 

Has anyone ran into this requirement and able to solve for it?


  • Mihai N. (Okta, Inc.)

    Hi @o7fzo (o7fzo)​ , Thank you for reaching out to the Okta Community! 

     

    This is not supported. The group functions available for the Okta Expression Language only return boolean values (true/false), not the actual group name, so even though you might be able to patch something together using a few different functions for a small number of groups, it's not really scalable when dealing with larger numbers. 

    That being said, you could try improvising something like what is described in this older post here if your Service Provider supports it. 

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

    --------------------------------

    Headed to Oktane? Here's what you can expect, plus all the Okta tips you may have missed this month

    Expand Post
    Selected as Best
  • Mihai N. (Okta, Inc.)

    Hi @o7fzo (o7fzo)​ , Thank you for reaching out to the Okta Community! 

     

    This is not supported. The group functions available for the Okta Expression Language only return boolean values (true/false), not the actual group name, so even though you might be able to patch something together using a few different functions for a small number of groups, it's not really scalable when dealing with larger numbers. 

    That being said, you could try improvising something like what is described in this older post here if your Service Provider supports it. 

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

    --------------------------------

    Headed to Oktane? Here's what you can expect, plus all the Okta tips you may have missed this month

    Expand Post
    Selected as Best
This question is closed.
Loading
Creating comma separated list of groups for SAML integration