User group sync issue with IMS and SAML IDP (non Azure or Google)

[shubhanshu_singh]

We've created a directory in Admin Console as per the steps mentioned in https://helpx.adobe.com/enterprise/using/create-directory.html. We are using a SAML provider other than Azure AD or Google.

Normally when a user logs in it also pulls in group association and if the group doesn't exist it gets created. But in our case we are observing the group is not syncing. 

Any inputs on how this (group sync) can be achieved will be helpful. Thanks!

[MayurSatav]

hi @shubhanshu_singh ,

These are some steps to troubleshoot and fix the issue:

1. Check the SAML provider configuration in AEM and make sure that the group information is being passed correctly from the provider to AEM. You can check the SAML response for the group information.

2. Check if the group sync is enabled in your AEM instance. You can do this by going to the User Management Console, clicking on the "Sync" tab, and checking if the "Sync Groups" option is enabled.

3. Check the logs in AEM to see if there are any errors related to group sync. You can check the error logs in the error.log file in the crx-quickstart/logs directory.

4. Make sure that the group path in AEM matches the group name in the SAML provider. If they don't match, the group sync will not work.

5. Try manually creating the group in AEM and see if it syncs with the SAML provider. If it does, then there might be an issue with the automatic group creation in AEM.

[shubhanshu_singh · Accepted solution]

Update: We are on AEM as a Cloud Service

The issue got fixed by associating the user group with the correct product profile.