In Okta you can create custom attributes for group profiles. However, if someone is a member of a group with such an attribute, these are not included in claims when they authenticate with okta. There also does not seem to be anyway to refer to these attributes using Okta expression language. The only workarounds I can seem to find are:

1. Inline hook: Use a hook to modify assertion/tokens with the group attributes.
2. Group rules. Use group rules as a pseudo group attribute. Instead of setting a group attribute, create a rule to add members of that group to another group that represents that attribute. For example, instead of adding an attribute "Y: true" to a group X; create a group rule that makes everyone in X also a member of a new group Y. However, there is a limit of 2000 group rules per Okta org which greatly limits this approach.

Is there no easier way to achieve this?