# IdP Group Mapping \[WIP]

The Org admin can configure mapping between IdP Groups and Codescan Organization Groups on the SAML Configuration screen.

Before configuring the IDP Group Mapping, a SAML connection must be configured.  [Find out how in these articles.](/product-guides/codescan/codescan-integration/single-sign-on-sso.md)

This feature allows to implement **many-to-many** mapping between IdP Groups and Codescan Orgs. 

When IdP Connection is configured to send the user groups, then **SAML Response** which we receive during User login contains the list of IdP Groups. Based on this data we can do the synchonization every time the user logs in. 

To configure the mapping between IdP Groups and Codescan Orgs and Groups, navigate to **Administration > SAML Connections** and edit the connection of your choice.  There is a **IdP Group Mapping** section on the SAML Configuration screen:

<figure><img src="/files/Uz4coHgiiacJfGkyk2BY" alt=""><figcaption></figcaption></figure>

You can add multiple rows for the mapping. In each row you define:

1. the IdP Group name - this is the text field;
2. the Codescan Org - this is the selection input
3. the Codescan Org Groups - this is set of checkboxes with the list of all Groups of the selected Org. The default Org Group is selected by default (e.g. Members group).

This configuration can be done only by the Org admin. And the Org Admin can modify this mapping anytime.

The Codescan will go through this list and programmatically add/remove users to Codescan Orgs based on that mapping.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://knowledgebase.autorabit.com/product-guides/codescan/codescan-integration/single-sign-on-sso/idp-group-mapping-wip.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.