Provisioning groups from custom IdP

[Jeffrey Anderson]

We use Atlassian Access with a custom IdP proxy running simplesamlphp, which proxies through to a federated login.

Since this is an IdP proxy, I don't think we can just sync the users and groups over, as a valid user has to authenticate against a federation.

But we do provide group information in the SAML assertions sent by our IdP.  

What do I have to do to integrate that group information with Confluence?  We provide a list of groups under the 'groups' attribute.  Is it sufficient to match the names of these groups with Atlassian groups?  Or do I need to modify the group attribute name in some way?

[Valerie Knapp]

Hi @Magenta Infomatics , welcome to the Atlassian Community and thanks for your question. I have just tagged Atlassian into this thread. Hopefully they will be able to help you.