To enable groups within Ping Identity Provider, you have to add groups to the application's attribute mappings.
- Log in to your OneLogin Administration Portal
- Go to Applications > Applications
- Click on your Cameyo SSO application
- Go to tab Parameters
- Click the [+] to add a new field
- Add the Field name named groups
(this needs to be called exactly like this) - Activate Multi-valued parameter
- click [Save]
- Select MemberOf from the Default if no value selected drop down
- Select Semicolon Delimited input
- IMPORTANT!
OneLogin requires the groups scope to be sent in order to receive the groups claim, therefore you have to add the following PowerTag to your company page:!SSO_MEMBEROF_SCOPE=1