mcbmoreno

This is the output when SAML2_DUMP_USER_DETAILS=true was added. Looks like it isn't passing groups? {"id_from_idp":"[email protected]","attrs_from_idp":[],"attrs_after_parsing":{"external_id":"[email protected]","name":"[email protected]","email":"[email protected],"saml_id":"[email protected]"}}

Went a different route. In the Google Admin console when setting up the SAML connection you can choose some additional attributes to send. Groups was not one of them but...

I think that will work but it looks like the External Authentication ID field in the Settings > Roles > select role, is not available when LDAP is not enabled?