Skip to main content

🔐 OKTA SAML 2.0 Setup for Multiple User Role Filters

Davis Van Luven
Updated

 

🧩 What This Article Covers

This article explains how to use SAML 2.0 and Okta to provision users with multiple locked filters (i.e., Role-level filters) in AskNicely. These filters allow users to only view or act on the subset of data tied to their assigned filter criteria.

🧭 How Role-Level Filters Work in AskNicely

In AskNicely, user roles can contain more than one user-level filter. For example:

  • Tech ID

  • Survey Metric: CSAT

  • District

You can toggle which filters are active for the user role. In the example screenshot, only two of the three filters are applied at the user level using the “locked filter” toggle.

 

⚙️ Setting Up OKTA SAML 2.0 for Multi-Filter Roles

Follow the standard SAML 2.0 setup instructions, with one key difference: do not use askNicelyFilter.key and askNicelyFilter.value attributes. Instead, pass individual attributes for each filter.

Attribute Setup Steps

  1. Navigate to:
    Applications > Applications > [Your Application] > General > Edit SAML Settings

  2. In the Attribute Statements section, add each filter as its own attribute. For example:

    • district

    • tech_id

ℹ️ You do not need to include the _c suffix in the attribute names. These fields will be passed into your AskNicely tenant automatically.

 

👤 Assigning Filter Values to Users

You can define attribute values at the user level or through group assignment.

User-Level Assignment

  1. Go to:
    Directory > People > [User] > Edit (Pencil Icon)

  2. Assign the user level filters attribute values associated with your top level filters 
    Example district is Aukland and tech_id is 10. 

 

Group-Level Assignment (Recommended for Scale)

Rather than assigning filters individually, you can configure attribute values at the group level in:

Directory > Groups

Then, assign users to the appropriate groups to inherit the filter attributes.

✅ Summary

  • Multiple role-based filters in AskNicely can be provisioned via SAML 2.0 using Okta.

  • Skip the generic askNicelyFilter.key/value and pass individual attributes like district or tech_id.

  • Attribute values can be set per user or at the group level in Okta.

🙋 Need Help?

If you need help configuring your Okta environment or troubleshooting your SAML setup, contact our Support Team at support@asknice.ly.

Related articles