3792170 - pingfederate sso: map idp groups to leanix roles without using a leanix standard role group name

• PingFederate has no feature to create role values, the names of the active directory groups get sent as the "role" attribute value
• Users need LeanIX roles to be assigned via SAML (VIEWER, MEMBER, ADMIN) without changing internal group naming conventions.

• Product: SAP LeanIX solutions
• SAP LeanIX MTM Single Sign-on

pingfederate, sso, saml, leanix roles, role mapping, authorization attribute, admin, member, viewer, group mapping, idp, attribute transformation, invite only, metadata, production configuration , KBA , LIX-MTM-SSO , SAP LeanIX MTM Single Sign-on , Problem