<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D5WR00001DbNkn0AFOkta Classic EngineSingle Sign-OnAnswered2026-01-30T17:23:27.000Z2026-01-27T19:34:31.000Z2026-01-30T17:23:27.000Z

KathyT.73511 (Anthropic Identity) asked a question.

Can we use a Group in IDP Routing Rules to identify which IDP to use instead of attribute

We have set up an Identity Provider and are trying to identify which users will be using the IDP through the routing rules. We have always used an attribute or a domain to redirect users to the IDP in the Routing Rules, but we would like to use a group as the criteria to redirect. Does anyone have experience doing this and if so, how? Maybe Regex?


  • Hello @KathyT.73511 (Anthropic Identity)​ Thank you for posting on our Community page!

     

    I do not believe this is possible as Okta usually needs to know who the user is before it can check their group memberships, whereas Routing Rules are evaluated at the very beginning of the login flow.

    If you can do a regex, it might not be the most viable option, I would recommend to use an attribute or domain.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
  • Hello @KathyT.73511 (Anthropic Identity)​ Thank you for posting on our Community page!

     

    I do not believe this is possible as Okta usually needs to know who the user is before it can check their group memberships, whereas Routing Rules are evaluated at the very beginning of the login flow.

    If you can do a regex, it might not be the most viable option, I would recommend to use an attribute or domain.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best

Loading
Can we use a Group in IDP Routing Rules to identify which IDP to use instead of attribute