Hi team! one of our customers tried to configure group attribute Mapping in the SSO setup suite (for an existing sso integration) even after completing all the steps & testing - the mapping was not saved for him 😞 would love a hand debugging what might be the cause

Debugging Group Mapping Not Saved Based on the issue where group attribute mapping isn't being saved in the SSO Setup Suite, here are the key troubleshooting steps: Check Configuration Requirements 1. Verify the user has proper permissions to configure group mappings 2. Ensure roles exist in Descope before attempting to map them 3. Confirm the IdP is sending group information in the assertion Verify Audit Logs Check the Audit and Troubleshoot page at app.descope.com/audits to view SAML or OIDC userinfo endpoint responses and see if group data is being received Common Causes • Missing RBAC permissions for the SSO Setup Suite user • Roles not properly configured in the Descope project before mapping • IdP not configured to send group attributes in the assertion • Browser session or caching issues preventing the save operation Validation Steps 1. Test the SSO configuration using the built-in testing tool in the Setup Suite 2. Use the Management SDK/API to verify if mappings were actually saved 3. Check if the mapped roles appear in user JWTs after authentication The documentation doesn't cover this specific "not saved" scenario in detail. I'd recommend checking the audit logs first to see what's happening during the save attempt, then verifying the user's permissions and role configuration. SSO Settings Guide | Descope Documentation SSO User and Group Mapping Guide | Descope Documentation Introducing the Descope SSO Setup Suite SSO Troubleshooting | Descope Documentation

Hi, can you please share your project id and the customer tenant id?

sure! project id: P34N7TR99nm3WF8ZNO4qVakUakUv customer tenant id: 4e76a3b0-f4a1-479f-acfc-528df5a9c554

I’m looking at their settings and see that the user/group mapping got set.

i do see it! thanks so why don't i see it in the sso setup suite?

You should be able to see it, are you looking at their SSO Setup Suite?

yes i am - its empty here

How do you open their SSO Setup Suite?

using the link from their tenant settings

The screenshots I posted is from their link

thats wierd 😅 yeah ill try

Adding @Lior Eliav to check the collision issue.

@Nir Bashan This could be local changes saved on your end. If on the testing page you see the

Discard changes

button enabled that would mean you have local changes hiding the configured value. can you tell me if that is the case?

yep that was the problem... that was really unclear - I would love for something (no matter which page im on) to indicate i have changes and am not seeing the current "saved" data

I agree ❤️ sorry for the confusion we are working on conveying this information better though the UI