To enable groups within Ping Identity Provider, you have to add groups to the application's attribute mappings.


  1. Log in to your OneLogin Administration Portal

  2. Go to Applications > Applications

  3. Click on your Cameyo SSO application

  4. Go to tab Parameters
  5. Click the [+] to add a new field

  6. Add the Field name named groups
    (this needs to be called exactly like this)
  7. Activate Multi-valued parameter
  8. click [Save]

  9. Select MemberOf from the Default if no value selected drop down
  10. Select Semicolon Delimited input
  11. IMPORTANT!
    OneLogin requires the groups scope to be sent in order to receive the groups claim, therefore you have to add the following PowerTag to your company page:
    !SSO_MEMBEROF_SCOPE=1