topic Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO in Dynatrace Managed Q&A

How to assign a user to multiple groups via SAML/SSO

mikko_satama — Thu, 13 Apr 2023 09:02:05 GMT

How to pass multiple user group names inside SAML 2.0 response attribute?

Could not find inside this documentation:

https://www.dynatrace.com/news/blog/servicenow-and...

Re: How to assign a user to multiple groups via SAML/SSO

Radoslaw_Szulgo — Wed, 12 Mar 2025 12:50:31 GMT

Just configure your idP to return multiple groups for a user in a SAML 2.0 response. Then setup the groups attribute in the configuration screen :

and it should work. More in our help page:

Manage users and groups with SAML in Dynatrace Managed

If that does not answer your question, please provide more details.

Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO

mikko_satama — Wed, 18 Apr 2018 10:09:38 GMT

Thanks Radoslaw, but that did not answer my question, which was probably not well formatted, but I just fiqured out it by testing.

The answer I was looking for:

You can pass multiple group names inside one attribute value (User group attribute) by separating them with comma-sign (,).

For example Group name 1,Group name 2,Group name 3

And of course group names should match exactly (case sensitive, no extra spacing) with Dynatrace User Group names.

Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO

mikko_satama — Wed, 18 Apr 2018 10:10:30 GMT

And please, add this information to your documentation:

https://www.dynatrace.com/support/help/get-started/managed-users-and-permissions/can-i-manage-users-and-groups-with-saml

Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO

tarjei_utnes — Wed, 25 Apr 2018 15:20:19 GMT

I second that. Please update documentation to explain how it accepts multiple groups.

Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO

qmt — Wed, 28 Nov 2018 17:33:49 GMT

Let me add this info here because I had a rough time configuring the group attribute, and my discovery wasn't documented :

I did create the Dynatrace groups with the exact same name as my Active Directory Groups, and it was still not working (using ADFS for the SSO)

In fact the name of the "user group attribute" in the SAML response was not "gr" nor "group" (as I configured it in ADFS), but it was "http://schemas.xmlsoap.org/claims/group" (yes, the whole url)

So I don't know who is responsible for this behavior, if it's Dynatrace or Microsoft, but at least now it works 🙂

Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO

Radoslaw_Szulgo — Tue, 14 May 2019 18:43:22 GMT

I’ll follow up with the team and we will improve that. Thanks!

Re: Dynatrace Managed, how to assign user to multiple groups via SAML/SSO

Greg_Sanders — Tue, 05 Nov 2019 16:29:52 GMT

where did you actually specify the url, "http://schemas.xmlsoap.org/claims/group"?