authorize user using SAML groups attribute

[mingyongqiao]

Hey SAP experts. if we integrate SAP Services with OKTA for SSO using IAS as proxy, but managing users manually. can we leverage the groups attribute in SAML to authorize user?

[istvanbokor]

Hello,

Do you mean using group attribute from the corporate IdP for Risk-Based Authentication rule, when IAS is a pure proxy?

Regards,
Istvan

[mingyongqiao]

We want to implement role based authorization using group attribute from the corporate IdP. is It possible?

Thanks

Ming

[srmuc69]

You can use any of the SAML assertions to map into the group and assign authorizations on a group level. So that should work fine.

Thanks

Stefan