IBM Support

Unable to see Groups with Generic Namespace configured for PingID

Troubleshooting


Problem

When upgrading to 11.1.5, users logging into a PingID Generic Namespace are unable to see the Groups/Roles from 'My Preferences' - 'Personal' - 'Advanced' - 'Groups and Roles'.

Symptom

No Groups/Roles are visible in the users preferences

Diagnosing The Problem

Extracting the id_token found the groups array [] name was not the default "groups" but:
"memberOf": [

Resolving The Problem

In the Advanced Properties of the Generic Namespace, change the parameters from:
          groupStrategy: "idToken"
          groupIdMapping: "groups"
          groupNameMapping: "groups"
To:
          groupStrategy: "idToken"
          groupIdMapping: "memberOf"
          groupNameMapping: "memberOf"

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"Component":"","Platform":[{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
02 March 2020

UID

ibm13521319