Okta SAML pass along the Users groups

In Okta, find your application then General -> SAML Settings -> Edit -> Next

On the Configure SAML tab you will see an area called SAML Settings. There’s a section titled GROUP ATTRIBUTE STATEMENTS (OPTIONAL). In the Name field add groups, leave the Name format as Unspecified. In the Filter field set the dropdown to Matches regex and add .* in the field if you want all groups. You can filter the groups for example if you want every group with the word WordPress you would use .*WordPress.* Once ready click Next and Finish.

In Auth0, go your connection Connections -> Enterprise -> SAMLP Identity Provider -> Click the play plugin on your connection. This will trigger the user sign in and create the fields on the user. You can view the data in the Auth0 dashboard by finding the user: Users -> select User -> Identity Provider Attributes or you can debug a rule and output the user object. In this case it would user.groups which would contain the information you need.

Identity Provider Attributes only update when a new Auth0 session is needed, you can read more here: User Profile Identity Provider Attributes don't update once created - #2 by jasonagnew