# Mapping AD groups with SAML

**URL:** <https://forum.ansible.com/t/mapping-ad-groups-with-saml/44094>\
**Category:** Get Help\
**Tags:** windows\
**Created:** [May 8, 2025, 12:56pm UTC](https://forum.ansible.com/t/mapping-ad-groups-with-saml/44094 "2025-05-08T12:56:09Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tc\_juli\_3106](https://avatars.discourse-cdn.com/v4/letter/t/df705f/32.png) [@tc\_juli\_3106](https://forum.ansible.com/u/tc_juli_3106)\
**Post date:** [May 8, 2025, 12:56pm UTC](https://forum.ansible.com/t/mapping-ad-groups-with-saml/44094/1 "2025-05-08T12:56:09Z")

</div>

Hi, i currently have a similiar scenario at my company. We have multiple departments with different requirements, who should be separated with organizations. I have succesfullly setup ldap login and org and team membership, but I want to do the same in SAML. But I cant wrap my head around how to map ad-groups.  
You only have one org mapping in your config. Do I need a group - \> attribute mapping for every organisation and team and role i wanna use? Or would it be easier to just drop every user/group as member and add role-definitions manually.  
Thanks

---

<div class="post-metadata">

**Author:** ![Leo](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/leo/32/23_2.png) [@Leo](https://forum.ansible.com/u/Leo)\
**Post date:** [July 25, 2025, 2:13pm UTC](https://forum.ansible.com/t/mapping-ad-groups-with-saml/44094/2 "2025-07-25T14:13:34Z")

</div>

Hi @tc_juli_3106 . I just moved your post to the #Get Help category from this thread [AWX / AAP SAML Configuration for ADFS - #2](https://forum.ansible.com/t/awx-aap-saml-configuration-for-adfs/41898/2) in the #Get Help > Guides, FAQs & Howtos

It’s a bit of an old post but I figured it might get more visibility here.