Application Management

User is not member of requested org and won't be autoprovisioned: No SAML groups received for Solarwinds APM Products

This article provides steps to troubleshoot the common error messages encountered during the configuration of SSO with the Azure AD IDP.

First published date

1/11/2022 11:25 PM

Last published date

1/11/2022 11:25 PM

Overview

User is not member of requested org and won't be autoprovisioned: No SAML groups received is an error occur because the Azure AD Idp doesn't send the name of the groups in the SAML assertion. Instead, it sends Group IDs, so the customer must update the role mapping configuration in the common settings.
 

Product section

Loggly

Cause

The probable cause for this issue is the Idp doesn't support Group names, only Object IDs.

Resolution


IDP side:
  First, you must set the correct name of the claim - it must be called “groups. “
image.png

On the following screenshot, you can see how to achieve this. So in comparison with the  configuration, you should change:
 
1. “Source attribute“ to “Group ID. “
2. Checkbox input “Customize the name of the group claim“ must be checked.
3. The name of the “group claim” must be set to “groups“ .
image.png

SP side (SWICUS): 
  According to Azure AD documentation, it’s not possible to use group names (because IdP doesn’t provide options to send Group names) so you must use IDs of the respective Groups.

1.    Groups in the IdP
image.png
2.    Configuration in the Common Settings
image.png