Skip to main content
Add groups to control role-based access for SAML users (users who sign in with SSO). Groups are supported for Azure, Okta, Google and more.

Overview

The process is simple:
  1. In the Minimus console, configure SSO and enable SAML. Learn more
    Make sure to configure the groups mapping attribute in the Minimus SAML form.
  2. In your identity provider, assign the relevant groups to the Minimus application. See the Okta example
  3. In the Minimus console, add the groups and set their role. Learn about user roles
That’s it. Permissions will automatically take effect the next time group members log into Minimus.

Add groups (Okta, Google, other)

SSO must be configured and enabled before you can manage groups in Minimus.
  1. In the Minimus SAML form (direct link):
    1. Enable Step 4: Group Mapping.
    2. Keep the default selection: Google / Okta / Other
    3. Enter the group mapping: groups
  2. Next, go to Manage > Users & Groups (direct link).
  3. Click Add Group (top right).
  4. Fill in the form:
    1. Specify the group name (or group ID) as listed in the identity provider.
    2. The provider will be set to SAML. This setting is hardcoded.
    3. Select the role: viewer, operator, admin. Comparison of roles
      1. Viewer is the default role. If no role is assigned, viewer will be automatically assigned.
      2. Operator role.
      3. Admin role.
  5. Save your changes. Changes will apply the next time a group member logs in with SSO.
Add Group

Configure Azure groups

There are 2 different ways to map Azure groups to Minimus. The Minimus SAML form is configured differently for each.

Azure group names

  1. In the Minimus SAML form:
    1. Enable Step 4: Group Mapping.
    2. Select: Azure
    3. Fill out the following Azure parameters: 4. Application Client ID 4. Client Secret
  2. In Azure, look up the relevant Azure group names.
  3. In the Minimus Groups form (direct link), add the groups by group name.
SAML Azure Group Mapping

Azure group IDs

  1. In the Minimus SAML form:
    1. Enable Step 4: Group Mapping.
    2. Keep the default selection: Google / Okta / Other
    3. Enter the Azure group mapping: groups
  2. In Azure, Look up the relevant Azure group IDs.
  3. In the Minimus Groups form (direct link), add the groups by Azure group ID (instead of the group name).
Last modified on February 1, 2026