Search code examples
samlpalantir-foundrypalantir-foundry-security

Is group name case sensitive in SAML payload (in Palantir Foundry context)?

During a SAML login via multipass, a list of groups is provided in the payload in <saml:Attribute Name="https://schemas.xmlsoap.org/claims/Group" ...>

Are these groups matched case-sensitively? i.e.: Will a group that was provided as "AbcDef" earlier, but is provided as "abcdef" later be treated as the same group or not?

Solution

  • You can now modify your SAML configuration in a self-serve way via Foundry Control Panel.

    For user attributes: please reach out through your internal support channel if you'd like to make user attributes case-sensitive - this option isn't available in the UI.

    For user groups: case sensitivity isn't currently supported for user groups. You need to enable the “Import user groups from the identity provider” option to populate a user's groups via SAML.