DavisX.79452 (Customer) asked a question.
For a SAML 2.0 application (we're the IdP)
I have to check if a SAML IdP user is in a specific group and then populate a SAML attribute with a static value.
I can evaluate lines 1-11, but adding lines 12+ I get an error trying to save the configuration. If anyone has a better way TIA.
Expression:
isMemberOfGroupName("Enterprise Architect") ? "ENTERPRISE_ARCHITECT" OR
isMemberOfGroupName("Enterprise Portfolio Architect") ? "ENTERPRISE_ARCHITECT_LEAD" OR
isMemberOfGroupName("Portfolio Manager") ? "PORTFOLIO_MANAGER" OR
isMemberOfGroupName("Journey Partner") ? "JOURNEY_PARTNER" OR
isMemberOfGroupName("Business Architect") ? "BUSINESS_ARCHITECT" OR
isMemberOfGroupName("Business Architect Lead") ? "BUSINESS_ARCHITECT_LEAD" OR
isMemberOfGroupName("Information Architect") ? "INFORMATION_ARCHITECT" OR
isMemberOfGroupName("Information Architect Lead") ? "INFORMATION_ARCHITECT_LEAD" OR
isMemberOfGroupName("Application Architect") ? "APPLICATION_ARCHITECT" OR
isMemberOfGroupName("Application Architect Lead") ? "APPLICATION_ARCHITECT_LEAD" OR
isMemberOfGroupName("AI Architect") ? "AI_ARCHITECT" OR
isMemberOfGroupName("AI Architect Lead") ? "AI_ARCHITECT_LEAD" OR
isMemberOfGroupName("Integration Architect") ? "INTEGRATION_ARCHITECT" OR
isMemberOfGroupName("Integration Architect Lead") ? "INTEGRATION_ARCHITECT_LEAD" OR
isMemberOfGroupName("Data Analytics Architect") ? "DATA_ANALYTICS_ARCHITECT"
Hi @DavisX.79452 (Customer) , Thank you for reaching out to the Okta Community!
Unfortunately, as far as I can tell this is exceeding the character limit.
As per the docs, the character limit is 1024.
Any way you could reduce the character length, maybe by using the "isMemberOfGroup" function instead of "isMemberOfGroupName" ?
That function leverages the group id and all group IDs should have a standard 20 character length.
You can get the group IDs via API or via the Admin UI, by simply going to the group page and checking in the browser URL bar for it.
Okta Admin Dashboard → Directory → Groups → <group name>. The URL should show something like https://<companyName>.okta.com/admin/group/00gyhx51xyxPHs1cN0x7 - where "00gyhx51xyxPHs1cN0x7" is the groupID.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.