Manage user groups from the Identity Provider (such as OneLogin, Azure AD, ADFS, Okta, Google, SAML IdP) or keep the user group assignments within Cheqroom.
In some cases, it may be more convenient to assign user groups within Cheqroom itself, so that you don't have to contact your company's IT administrator to change the user group of specific users.
When you select a default user group, then you will also be able to choose how they are managed:
Option 1: Identity Provider (e.g. OneLogin, Azure AD, ADFS, Okta, Google, SAML IdP)
When user groups are managed through the Identity Provider (IdP), the following logic applies to new and existing users:
If the IdP doesn’t return a user group, the user will be assigned the default user group. Any existing user group previously assigned to the user in Cheqroom will be overwritten.
If the IdP does return a user group, that user group will be assigned to the user.
Any existing user group previously assigned to the user in Cheqroom will be overwritten.
The user group will be updated on every login through SSO
When managing user groups through the IdP, you’ll get an overview of all possible user groups that can be assigned via SSO:
Copy the user group values you wish to use in your IdP.
Refer to the links below for detailed instructions on configuring user groups for specific IdP’s:
Option 2: Cheqroom
When user groups are managed through Cheqroom, the following logic is applies:
New users First, new users must log in through SSO in order for you (the admins) to manage their user groups.
Newly created users will be assigned the default user group when they log in for the first time through SSO.
Existing users
You can immediately manage their user groups in Cheqroom
If you previously used the Identity Provider option, the user group claim will always be ignored.