Hello All,

We currently have OKTA SSO working on a DMS for users that belong to a couple domain groups (Local groups created with identical names as the domain group within the AD). Those users are able to authenticate into cube and webapps using OKTA external authentication without issue.

Recently, we have tried creating a new local group within cube for additional users to begin logging into the system and they are encountering the following error:

What does "No groups found in SAML response" indicate?

When moving those new users within the AD, from the group they should belong, and into the group that has been working for other users, they can authenticate. Leading us to believe there is either a group/user configuration issue on the OKTA side, or DataMiner is not handling the addition of new groups appropriately.
Within DataMiner, the externalAuth config has not changed and the new local groups are being created the same way as the other working groups.

Note: Group claims are set to true within the ExternalAuth config.

Thanks in advance!