SSO map user group

[Nigel Wu]

We'd like to sync both users and groups from our IDP(Auth0) to Atlassian.

In the document https://support.atlassian.com/security-and-access-policies/docs/configure-saml-single-sign-on-with-an-identity-provider/, it shows that we can only sync users. 

Is it possible to sync IDP groups to Atlassian groups when users login?

For example, another SAML mapping for user group.

[Ed Letifov [TechTime - New Zealand] · Accepted solution]

Atlassian only supports group sync via SCIM protocol in the background, not via SAML claims in the frontend.

Auth0 does not support SCIM.

So the real answer in your case is "no"

[Nigel Wu]

It's weird that Atlassian doesn't support group syncing via claims. Thanks for your answer. 

[Gia Tự Lê]

consider using the API, it may need a little scripting or middle ware low-code/no-code 

[Dave Meyer]

Yes, we support group syncing with a number of major cloud identity providers. See https://support.atlassian.com/provisioning-users/docs/understand-user-provisioning/

[Wadhwani, Piyush]

This is not what OP is asking, atlassian should support saml group claims as part of login response.