RiskVision can automatically create teams based on external directory user group attributes. The assignment is performed user-by-user. If a new user (imported or automatically created) belongs to group X, RiskVision will create a team X, if it does not yet exist, and assign the new user to that team.
Be careful, because this feature can create many one-member teams if a wrong group attribute is chosen. For example, the OU attribute (organizational unit) is usually appropriate for team membership. Specifying the middle initial attribute would eventually create 26 meaningless teams in RiskVision.
To configure team creation:
- In the Administration application, go to Administration > SAML Configuration and click the Authentication tab.
- Click Edit at the upper-right corner of the Authentication tab.
- To disable automatic team creation and assignment, choose No for the question Map external group. To enable automatic team creation and assignment, choose Yes for the question Map external group.
- If you chose Yes, specify the name of the LDAP attribute in the External group attribute name field. The values in this field will be used to create RiskVision teams.
- Click Save to update the team creation setting, or Cancel to exit without saving changes.
The team membership will be periodically synchronized, but LDAP groups that are deleted or renamed will not be updated in RiskVision.
