ZTA Accounts Groups (IdP)

  1. New Group button: Register a new group from external IdP integrated with Safous.
  2. Status: Shows the current status of the group, indicating whether it is active (enabled) or inactive (disabled).
  3. Name: Shows the name of the group.
  4. Identity Provider: Shows the name of the source integrated external IdP.
  5. Expand/Shrink button: A '+' button to expand and a '–' button to shrink the group's detailed information.

  1. Edit button: Allow modification of the group's name, IdP, and attribute.
  2. Delete button: Delete the group.
  3. Group Name: Name of the group in Safous. Must be unique among all groups from all external IdPs.
  4. Status: Shows the current status of the group, indicating whether it is active (enabled) or inactive (disabled). Can also be toggled on (enabled) or off (disabled).
  5. Grant access to Recording data: Control whether the members in the group can access recording data or not.
  6. Identity Provider: List of integrated External IdPs. Select the IdP where the group came from.
  7. Attribute/Free Query: Choose whether the group should be identified by using its attribute from the external IdP or by using free query. For more details, please refer to this article.
    1. If Attribute: Can be used on all supported external IdPs (AD/LDAP, SAML, OpenID). 
      1. Expected value: The expected value that identifies the group within that IdP. Differs for each IdP.
      2. Attribute: The attribute name for group object in that IdP. Differs for each IdP.
    2. If Free Query: Can only be used on AD/LDAP and SAML IdPs.
      1. Matching Query: The format of query that matches the group's identity in the integrated external IdP.
        1. If AD/LDAP: The full LDAP query.
        2. If SAML: The XPath query to match the values expected from the given group.