Hi @Randy.Manipon , That ends up being a bit of a complex answer.   Right now, tenant user ONLY refers to a user that logs into a controller where the controller setting being used is "local"/"AppDynamics" user.    There are 2 SAML configurations now - one for Accounts website services that is only for Accounts website access (not controller account) and one for Controller accounts, which is only for controller account use.   So, right now, you would have to setup SAML for Accounts to give your users access to Accounts services (training, support, community, etc) using their corporate credentials and SAML using the "Security Provider" settings within the controller itself.  That will allow your users to access the controller/product capabilities using their corporate credentials. In the not too distant future, that will be changed somewhat, but more on that will be provided when we are ready.  For now, tenant users are authenticated only by AppDynamics, not SAML.   If you want SAML for all surfaces, configure it in the Accounts SAML Federation area and in the controller Security Provider area. I hope that helps, Bill ... View more

Hi @Randy.Manipon  At this time, there is no grouping support for the Accounts SAML federation feature.  The current functionality is for identity authentication only.  Any user that is set to authenticate through the IDP that you have configured through the SAML federation function will be directed to your IDP for authentication.   This requires one of 2 things: 1) user is registered already in Accounts user management and set to be authenticated by your IDP or 2) user is "just in time" (JIT) provisioned into Accounts user management through the IDP initiated flow.    Once the user record is established in the Accounts user management listing, when they come to the Accounts pages or services of appd.com to login, they should get directed to your Azure IDP to authenticate.   For reference, the documentation is here: https://docs.appdynamics.com/21.12/en/appdynamics-essentials/account-management/account-management-portal/saml-federation Over time, we do aim to provide improved JIT provisioning as well as attribute mapping support to enable access control from SAML attributes.  Look for some of those improvements later this year. Does this help?   ... View more