SAC SAML Mapping - Groups Attribute Not Visible in SAC

[tskwin]

Hello all,

I am configuring SAML SSO in SAC and trying to map the Groups attribute under SAML Attribute Mapping. However, I cannot see the "Groups" attribute in SAC.

The SAML Tracer shows that the attribute (Group) is being send in the SAML assertion.

<Attribute Name="Groups">

<AttributeValue>d50b9d19-460b-484c-87f4-0f57817f064c</AttributeValue>

Can Azure Groups be assigned this way?

Many Thanks

Best Regards

[dyaryura · Accepted solution]

Hi

Group claim has to be set to static value "sac" and groups can be passed using custom1,csutom2 for example for Teams and Roles. The sample scenario is described here:

Managing Users Using SAML Attributes