SUMMARY
When parsing the SAML assertion coming from the Identity Provider, Strategy Web reads the group membership from the attribute values provider within the attribute with name = groupAttributeName as specified in MstrSamlConfig.xml. By default, the groupAttributeName is "Groups". Multiple groups must be passed in separate AttributeValue tags as seen below:
<Assertion>
...
<Attribute Name="Groups">
<AttributeValue>group1</AttributeValue>
<AttributeValue>group2</AttributeValue>
<AttributeValue>group3</AttributeValue>
....
</Attribute>
...
</Assertion>
ACTION
Make sure, the SAML Identity Provider is configured to provide the group membership in the format outlined above in order to pass more than one group to Strategy. KB426582