Splunk SAML with IAM identity Center as the IdP

[aBazS]

Hi everyone, I am using IAM identity Center as the IdP for SAML auth. I have 2 groups in the IdP and 2 SAML groups in Splunk with differing roles and the groups in the IdP contain different users. 

My issue is I am unable to work out how to assign a user to a group in Splunk based on the users group in the IdP. I can hard set the role attribute to the group name or even both group names and this will result in all users receiving the referenced Splunk group's role regardless of what group they are assigned to in the IdP. 

Does anyone know how to resolve this issue or if there is a user attribute for group?

[aBazS · Accepted solution]

so looks like I was able to solve this issue but mapping "${user:groups}" to the role attribute and creating Splunk SAML groups with the name of the Group ID from the IdP group.