Working with Audience with a combination of SAML authentication

Dudi Glasswien

Hi, 

I am trying to understand the process of working with Audience & SAML through this article:

https://support.atlassian.com/statuspage/docs/require-saml-for-audience-specific-pages/ 

Everything is clear except the registration process. When defining a new Audience Group, to add a new user, the process requires an account (an email is sent to the mailbox, and the user needs to define a username and password to register to the group).

I would like to avoid manual registration. Can I assume that once SAML is set and a user logs in to the status page, instead of having a StatusPage login, he will have an Okta login? After providing the credentials, the user will be redirected and automatically registered under the relevant StatusPage group that shows him the matched components state (which belongs to that group)

Thanks you

Alan Violada

Hey Dudi, Alan from the Statuspage Support team here.

Once SAML is enabled, users and groups will be managed via the IDP configuration  - When logging in via SSO, users will be assigned to the appropriate audience groups based on the "groups" attribute sent by the IDP.

One thing to keep in mind is that this will only work if the group name coming in from the IDP matches the "External Identifier" value configured for each group in the Statuspage configuration.

 

Regards,

Alan