OIDC custom mapping as an Array instead of a String

I have an OIDC Enterprise connection with Okta. When I use the default bindall mapping_mode, groups values get mapped to the user as an Array of strings, which is what I would expect.

When I use usemap mapping_mode and try to map the groups values to a non-restricted claim, the values get mapped as one String of comma separated values eg: “group1, group2, group3”

The mapping I’m using is:

“federated_groups”: “${context.userinfo.groups}”

As per the docs: Configure PKCE and Claim Mapping for OIDC Connections

Is there a way to configure the mapping so that I can get a list of group values mapped to the federated_groups attribute, instea dof a single string of comma separated values? Is this a limitation on the custom mappings?

4 Likes

I have the same question as above. Any insights on this?