# Azure AD oauth and groups

**URL:** <https://forum.ansible.com/t/azure-ad-oauth-and-groups/35561>\
**Category:** AWX Project\
**Tags:** azure, awx\
**Created:** [July 28, 2021, 5:59pm UTC](https://forum.ansible.com/t/azure-ad-oauth-and-groups/35561 "2021-07-28T17:59:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![daemenseth](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/daemenseth/32/677_2.png) [@daemenseth](https://forum.ansible.com/u/daemenseth)\
**Post date:** [July 28, 2021, 5:59pm UTC](https://forum.ansible.com/t/azure-ad-oauth-and-groups/35561/1 "2021-07-28T17:59:45Z")

</div>

I want to use azure ad authentication for my awx instance.  
The logins are working, but does some have some examples how  
to do team mapping based on azure ad groups.

Or do I need to use saml?

---

<div class="post-metadata">

**Author:** ![klaasdemter](https://avatars.discourse-cdn.com/v4/letter/k/3bc359/32.png) [@klaasdemter](https://forum.ansible.com/u/klaasdemter)\
**Post date:** [July 30, 2021, 11:22am UTC](https://forum.ansible.com/t/azure-ad-oauth-and-groups/35561/2 "2021-07-30T11:22:12Z")

</div>

Hi,

[https://github.com/ansible/awx/issues/7362](https://github.com/ansible/awx/issues/7362)

I think the answer is you have to use saml or implement the feature and create a PR 🙂

Greetings

Klaas

---

<div class="post-metadata">

**Author:** ![daemenseth](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/daemenseth/32/677_2.png) [@daemenseth](https://forum.ansible.com/u/daemenseth)\
**Post date:** [July 31, 2021, 7:57am UTC](https://forum.ansible.com/t/azure-ad-oauth-and-groups/35561/3 "2021-07-31T07:57:36Z")

</div>

I read that article.  
I looks like the groups are not implemented for Azure AD authentication.  
Now I used SAML authentication