# Can we do group to organization mapping when using Azure AD?

**URL:** <https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603>\
**Category:** AWX Project\
**Tags:** azure\
**Created:** [May 23, 2018, 5:08pm UTC](https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603 "2018-05-23T17:08:02Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eric\_Chong](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/eric_chong/32/9436_2.png) [@Eric\_Chong](https://forum.ansible.com/u/Eric_Chong)\
**Post date:** [May 23, 2018, 5:08pm UTC](https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603/1 "2018-05-23T17:08:02Z")

</div>

Is it possible to have group to organization mapping when authenticating through Azure AD? There is an option to do that when doing LDAP authentication. I wonder if we can do the same with Azure AD.

Thanks

---

<div class="post-metadata">

**Author:** ![Christopher\_Meyers](https://avatars.discourse-cdn.com/v4/letter/c/3e96dc/32.png) [@Christopher\_Meyers](https://forum.ansible.com/u/Christopher_Meyers)\
**Post date:** [May 23, 2018, 5:13pm UTC](https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603/2 "2018-05-23T17:13:36Z")

</div>

Yes, Azure AD is just another LDAP provider to AWX.

---

<div class="post-metadata">

**Author:** ![Eric\_Chong](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/eric_chong/32/9436_2.png) [@Eric\_Chong](https://forum.ansible.com/u/Eric_Chong)\
**Post date:** [May 23, 2018, 5:47pm UTC](https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603/3 "2018-05-23T17:47:02Z")

</div>

Do you have an example of the syntax for the mapping? It uses OAuth2, so does it return the group information?

---

<div class="post-metadata">

**Author:** ![Idan\_Bidani](https://avatars.discourse-cdn.com/v4/letter/i/b3f665/32.png) [@Idan\_Bidani](https://forum.ansible.com/u/Idan_Bidani)\
**Post date:** [October 31, 2018, 8:14pm UTC](https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603/4 "2018-10-31T20:14:51Z")

</div>

Have you figured it out? I’m looking for information about this as well

Thanks,

---

<div class="post-metadata">

**Author:** ![Eric\_Chong](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/eric_chong/32/9436_2.png) [@Eric\_Chong](https://forum.ansible.com/u/Eric_Chong)\
**Post date:** [November 1, 2018, 3:23pm UTC](https://forum.ansible.com/t/can-we-do-group-to-organization-mapping-when-using-azure-ad/27603/5 "2018-11-01T15:23:09Z")

</div>

I opened a case with RH back in May and they responded that it was not supported at that time. There were couple of threads they pointed out.

LDAP Mapping + SAML Auth: [https://github.com/ansible/awx/issues/308](https://github.com/ansible/awx/issues/308) SAML Team/Org Mapping [Merged]: [https://github.com/ansible/awx/issues/217](https://github.com/ansible/awx/issues/217)

I haven’t seen any update on the oauth section of the doc, so not sure any implementation has been done yet.