Tiled role and group SAML attributes FAQ

Before setting up the Tiled role and group attributes in your SAML provider, review these commonly asked questions and scenarios to understand how these attributes affect your account. 

1. Do I need to do anything on the Tiled side for this feature to work?

   
   Yes. You must have 'SSO' and 'Just in time provisioning' set up in Tiled's account settings.
   
   
2. Is this feature specific to Okta?
   No. This feature supports any SAML assertion identity provider. 
   
   
3. Can I create new roles and groups from my identity provider?
   No. You cannot create new roles or groups from your identity provider. User roles and groups must exist in Tiled before being referenced within your identity provider. 
   
   
4. Are roles and groups case and space sensitive?
   Yes. Roles and groups must match exactly how they are created in Tiled, including capitalization and spaces. For example, the role Admin is not the same as admin. (Example: The role Admin is not the same as admin)
   
   
5. Are the role and group attributes dynamic?
   Yes. You can change a user's role or group more than once. The changes made would be reflected the next time the user logs into Tiled.
   
   
6. If my role or group has changed, will I see the update on the mobile app?
   To see a role or group change reflected in the mobile app, you must first log into Tiled via the desktop or mobile web. If you log into the mobile app after the change without doing this first, you will not see the role or group update.
   You must log into Tiled via the desktop or mobile web first to see the change reflected in the mobile app. 

User Scenarios