Looking for Reference Implementation / Flows for Group assignment from IdP Tokens (OIDC or SAML)

Eric

I'm starting an SSO integration with Decisions and want to map my Group claims from my IdP tokens to my user accounts in Decisions.

I see that I can create a custom flow that will be run at every login, however, I was looking if anyone had reference implementations that I could use which extracts groupIds from SAML tokens (XML) or group claims from JWT tokens to modify user account permissions.

Kobebills_Decisions

Hello,

Thank you for contacting Decisions Support.

Using a SAML Login flow to run after each log in will allow passing in a list of Assertion Attributes These attributes are now organized in pairs containing the Attribute Name and Value. You can use a filter list step to filter out any unnecessary attribute names. The remaining attribute values would be associated with the value name with for groups. After getting the list, you can add additional logic to add any account to the necessary groups. This is just a brief overview on how you can extract the IDs.

2025-02-06_16h54_04.png

Uploaded Feb 7, 2025114.41 KB

2025-02-06_16h55_26.png

Uploaded Feb 7, 202574.25 KB

Step1.png

Uploaded Feb 7, 2025106.2 KB

Warning: Please Note: The examples attached were developed to be instructional, and were not developed as officially supported components. For more information or to engage our service team to develop fully supported, production quality solutions, please contact: services@decisions.com

Thank you,

Kobe