User17056847738629796440 (Customer) asked a question.
Return LDAP groups in SAML Assertion
I am setting up SSO through SAML. An LDAP server is connected to okta. I will need access to the LDAP groups of the authenticated user. I previously set up OAuth and was able to achieve this by adding the 'groups' scope to the authorization server.
I found this link (https://help.okta.com/en-us/content/topics/apps/apps_mapping_ad_ldap_and_workday_values.htm) but I don't see the yellow box with "View Setup Instructions." How can I return LDAP groups with SAML assertion?
Hi @User17056847738629796440 (Customer) , Thank you for reaching out to the Okta Community!
As the article mentions, the Template SAML 2.0 app has been deprecated, so will need to use the App Integration Wizard for a custom SAML app.
As for the “View setup instructions” option, the screenshot in the article is outdated. The UI has changed a bit since then. Please check the screenshot below, the option is now on the side.
I also recommend reviewing the following article:
https://support.okta.com/help/s/article/How-to-pass-a-user-s-group-membership-in-a-SAML-Assertion-from-Okta
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Ask the Experts: Okta Device Access Product Team Now Thru 3/22