Jenkins does not process AD groups via SAML Plugin

Using Jenkins
1

Hi,
i have the following problem:
We’re using the SAML Plugin to login users via SSO. The SSO Token is correct and provides AD groups, UserID, username and so on. It works fine for our team members, which are assigned to a global admin role.
For other users this does not work. When they click on their profile, there are no groups listed, and they can’t see anything in Jenkins. Their User-ID and username, provided via SAML, are displayed correctly though. The groups are correctly displayed when i look at https://.com/user/
We’re using Role Based authorization, with Global and Item roles. These roles are assigned to the active directory groups in Jenkins.
I hope anybody has an idea to help with this issue.

Jenkins Version: 2.462.1
SAML Plugin Version: 4.464.vea_cb_75d7f5e0 (SAML)

2

Hello @lukas,

Could it be that your SAML groups aren’t correctly mapped to the Jenkins roles for non-admin users?

3

The roles should be mapped correctly. I have assigned myself a developer group, and it is displayed in my Jenkins user profile. The same group is not shown, when a developer opens his profile.