kk krish wrote... Yes, Default group assignation is ok. But overriding the existing user assigned groups is a little weird. Any how i have one more curious question that how can we configure more than one Group Membership names in AEM, if my SAML assertion is capable sending multiple parameter names...