OKTA SAML Connection Order Priority- how will Splunk decide what role users take?

[neeravmathur]

Hi Guys,

We are migrating our Splunk Authentication from LDAP to OKTA SAML. We have about 40 odd SAML groups setup in Splunk. Also, each SAML group has a different role.

Now, there are many users which are in multiple SAML groups. Question is how will Splunk decide what role that users takes?

I know that LDAP authentication will give precedence to the Connection Order of the LDAP strategy meaning if a user is in strategy#6 and #7, he will be assigned the role which is assigned to LDAP strategy #6. 

I don't see this option in the SAML. Any help would be appreciated.

Thanks,

Neerav