This message was deleted.

Hi, pretty much yeah, the difference is that my installation is clean (installed 2.6.3-patch1 a month ago) Taking a look into the SAML Assertion the assertion that 2.6.3-patch1 makes (or gets) does not have the

groups

attribute, and the assertions that 2.5.3 makes (or gets) does have the

groups

attribute This is my Attribute configuration Okta side 2.6.3-patch1 only gets userName and displayName 2.5.3 get userName, displayName and the groups list