Tiled role and group SAML attributes FAQ

Before setting up the Tiled role and group attributes in your SAML provider, it's important to understand what this means for your account and what you can expect. Please review these commonly asked questions and scenarios for these attributes. 

1. Do I need to do anything on the Tiled side for this feature to work?
   Yes. You must have 'SSO' and 'Just in time provisioning' set up in Tiled's account settings.
   
   
2. Is this feature specific to Okta?
   No. This feature supports any SAML assertion identity provider. 
   
   
3. Can I create new roles and groups from my identity provider?
   No. You cannot create new roles or groups from your identity provider. User roles and groups must exist in Tiled before being referenced within your identity provider. 
   
   
4. Are roles and groups case and space sensitive?
   Yes. Similar to uploading users via CSV, roles and groups must be added to a user exactly how the roles and groups are created in Tiled. (Example: The role Admin is not the same as admin)
   
   
5. Are the role and group attributes dynamic?
   Yes. You can change a user's role or group more than once. The changes made would be reflected the next time the user logs into Tiled.
   
   
6. If my role or group has changed, will I see the update on the mobile app?
   If you log into the mobile app since the change, you will not see the role or group update.
   You must log into Tiled via the desktop or mobile web first to see the change reflected in the mobile app. 

User Scenarios