Hello!
We are in the process of integrating Dynatrace with Efecte Identity Management (EIM) for user authentication and access control. However, we are facing challenges in correctly mapping the security claims required for role-based access in Dynatrace.
What we are trying to achieve:
- Configure SSO authentication between Efecte Identity Management (EIM) and Dynatrace.
- Assign Dynatrace permissions based on user groups or roles coming from EIM.
- Map security claims correctly so that users get the appropriate access levels in Dynatrace.
The current issue:
- EIM does not provide a Group ID. Instead, users are assigned roles and possibly Entitlement IDs, but no direct group membership information is available.
- We are unsure which attribute from EIM should be used to correctly map Dynatrace security groups.
Current SSO Setup:
- Identity Provider: Efecte Identity Management (EIM)
- Authentication Method: [SAML 2.0]
I would much appreciate any kind of thoughts, experiences in this regards.
Thank you,
Lukas
