A user may belong to multiple AD groups. This guide describes how to return the list of groups the user belongs to in a SAML attribute.
Section |
---|
|
Column |
---|
Under SSO>Service Providers locate the SP you wish to add the attribute to.
Click on the Ellipses and select Edit from the drop-down menu that appears |
Column |
---|
|
Panel |
---|
borderColor | #9EBEE5 |
---|
bgColor | #f0f0f0 |
---|
borderWidth | 1px |
---|
|
|
|
|
...
Section |
---|
|
Column |
---|
Add the following parameters: Field | Value |
---|
Location: | HTTP Body | Name: | This can be any name the SP requires however usually it is 'groups' | Format: | attrname-format:URIunspecified | Script: | groups*?.name |
|
Column |
---|
|
Panel |
---|
borderColor | #9EBEE5 |
---|
bgColor | #f0f0f0 |
---|
borderWidth | 1px |
---|
|
|
|
|
...