Create and manage groups

An Identity as a Service group is a collection of users. You can assign or remove groups assigned to users in the groups that your role can manage. If your role allows you to Manage All Groups (see Create, assign, and manage roles), you can create as many groups needed to control which users can access applications on Identity as a Service.

Create a group

1. Click > Members > Groups. The Groups List page appears.

2. Click . The Add Group dialog box appears.

3. Enter a Group Name for your group.

4. Optional. In the Group Attribute field, enter additional attributes that are associated with the group. These attributes can be mapped into SAML assertion attributes and OIDC claims and are returned in a SAML or OIDC and OAuth response.

5. Click Add. The group is added to your groups list.

Edit a group

1. Click > Members > Groups. The Groups List page appears.

2. Click the group name. The Edit Group dialog box appears.

3. Edit the Group Name as required.

4. Optional. In the Group Attribute field, enter additional attributes that are associated with the group. These attributes are returned in a SAML or OIDC and OAuth response.

5. Click Save.

Note: You cannot change the name of a group associated with an Active Directory.

Delete a group

1. Click > Members > Groups. The Groups List page appears.

2. Click for the group you want to delete.

3. Click Delete on the confirmation prompt.

Sort and filter groups

1. Click > Members > Groups. The Groups List page appears.

2. You can do the following actions:

a. Click the arrow next to the Group Name column heading to sort the groups numerically of alphabetically.

b. To select multiple groups, click the checkbox next the desired groups.

c. To select all groups, select the checkbox next the Group Name.

d. To filter groups, click to enable filtering. Select your filter options and then click Apply.

1. Click > Members > Groups. The Groups List page appears.

2. Click to export the user list to a .CSV file. The Export Table to CSV dialog box appears.

3. Optional: Enter a Name for the file.

4. Optional: Enter a Description for the file.

5. Select the File Delimiter radio button, Comma (,) or Pipe (|).

6. Select the attributes you want to include in the file.

7. Click Export. The CSV file is exported to the Reports page (see Manage reports).

Note: You can export a maximum of 100,000 records.

Set advanced settings

Add Advanced Settings to groups

1. Click > Members > Groups. The Groups List page appears.

2. Scroll to the bottom of the Groups List page.

3. Click Show Advanced Settings. The Group Attribute Type options appear.

4. Select one of the following options:

● String - Include string content to a maximum 10,000 characters.

● OIOSAML - Supports Danish OIO SAML Web SSO Profile 3.0 for interoperation with Kombit Context Handler 2. This information can be encoded and returned in a SAML assertion defined in OIOSAML and returned to Kombit Handler 2.

5. Click Save.