EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB426582: What is the required SAML assertion group attribute format to pass multiple group memberships from SAML Identity Provider to MicroStrategy Web 10.6 and above


Pascal Deguine

Principal Product Specialist • Strategy


This knowledge base article explains which format is required to pass multiple groups in the SAML assertion to MicroStrategy Web 10.6 and above.

SUMMARY
When parsing the SAML assertion coming from the Identity Provider, Strategy Web reads the group membership from the attribute values provider within the attribute with name = groupAttributeName as specified in MstrSamlConfig.xml. By default, the groupAttributeName is "Groups". Multiple groups must be passed in separate AttributeValue tags as seen below:
<Assertion>
...
<Attribute Name="Groups">
<AttributeValue>group1</AttributeValue>
<AttributeValue>group2</AttributeValue>
<AttributeValue>group3</AttributeValue>
....
</Attribute>
...
</Assertion>
ACTION
Make sure, the SAML Identity Provider is configured to provide the group membership in the format outlined above in order to pass more than one group to Strategy. KB426582


Comment

0 comments

Details

Knowledge Article

Published:

June 30, 2017

Last Updated:

December 24, 2018