I'm currently in the process of setting up SAML for Azure Active Directory. Due to the amount of users in the environment, we are wanting to use groups to control this. At this point I have the Azure Application created and configured. I have also completed the SAML configuration within Orion.
If I have my test user added to the Azure Application Users and Groups, and have the individual SAML account added to Orion, I can successfully complete the SAML configuration test.
I have not been able to get it setup with groups at this time.
On the Azure front:
Group(s) have been added to "Users and Groups"
Under Attributes & Claims, I have added the claim OrionGroups and have that set with the value "user.groups"
User has been added to the group
On the Orion side,
Under Accounts, I have added the SAML group via the Group Name
Additionally, tried to add the SAML group via the Object ID
When running the test I receive the message:
User ID 'USERINFO' has not been matched to any SAML individual account or SAML group.
If I run the test with a user that is not in one of the Azure groups, I do receive the Microsoft unauthorized message.
Any thoughts?
