# User access management - integration with SAML

**URL:** <https://community.tulip.co/t/user-access-management-integration-with-saml/14048>\
**Category:** Support, Troubleshooting, & Help\
**Tags:** apps, saml, user-groups\
**Created:** [March 6, 2025, 12:39am UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048 "2025-03-06T00:39:42Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![lauz](https://avatars.discourse-cdn.com/v4/letter/l/f1d935/32.png) [@lauz](https://community.tulip.co/u/lauz)\
**Post date:** [March 6, 2025, 12:39am UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/1 "2025-03-06T00:39:42Z")

</div>

We would like to request an enhancement on the User Group functionality to allow it to directly integrate with SAML, instead of requiring manual addition of users into the User Group and link the user access to SAML. This enhancement would be especially beneficial when managing multiple applications. 🤩

---

<div class="post-metadata">

**Author:** ![kevin.kononenko](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kevin.kononenko/32/32_2.png) [@kevin.kononenko](https://community.tulip.co/u/kevin.kononenko)\
**Post date:** [March 6, 2025, 2:15pm UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/2 "2025-03-06T14:15:03Z")

</div>

Hello Shawn, there should be a way that you can map users into User Groups via the SAML settings. Do you have a field like this in your SAML settings within Account Settings?

 ![image](https://us1.discourse-cdn.com/flex020/uploads/agilemfg/original/2X/9/94c55a61a540530d7198fce23e67801b242ec6f0.png)

---

<div class="post-metadata">

**Author:** ![lauz](https://avatars.discourse-cdn.com/v4/letter/l/f1d935/32.png) [@lauz](https://community.tulip.co/u/lauz)\
**Post date:** [March 6, 2025, 11:51pm UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/3 "2025-03-06T23:51:42Z")

</div>

Yes, I’ve just realized it’s there. I verified with our team, and it has been upgraded to LTS 13.1 now. Thanks! Let me try it out.

---

<div class="post-metadata">

**Author:** ![yannick](https://avatars.discourse-cdn.com/v4/letter/y/b782af/32.png) [@yannick](https://community.tulip.co/u/yannick)\
**Post date:** [March 7, 2025, 7:11am UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/4 "2025-03-07T07:11:00Z")

</div>

Hi @kevin.kononenko, thanks for the hint.

We have a similiar bounderie.

Is it possible to assign specific apps to a custom user group or user role?

What we’re trying to achieve: Manage access to Apps over the platform (user management).  
e.g. The user group: “Warehouse Team” should only be allowed to access the “Warehouse App”.  
The user group: “Manufacturing Team” should only be allowed to access the “Manufacturing Apps”.

---

<div class="post-metadata">

**Author:** ![lauz](https://avatars.discourse-cdn.com/v4/letter/l/f1d935/32.png) [@lauz](https://community.tulip.co/u/lauz)\
**Post date:** [March 7, 2025, 8:05am UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/5 "2025-03-07T08:05:04Z")

</div>

Hi Yannick, i found this in another forum… this might work, lets try out

 ![image](https://us1.discourse-cdn.com/flex020/uploads/agilemfg/original/2X/d/de8f18c7fc36e40906b3878d824fa40451075d9d.png)

---

<div class="post-metadata">

**Author:** ![kevin.kononenko](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kevin.kononenko/32/32_2.png) [@kevin.kononenko](https://community.tulip.co/u/kevin.kononenko)\
**Post date:** [March 7, 2025, 1:26pm UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/6 "2025-03-07T13:26:59Z")

</div>

Hi @yannick , @lauz is correct- our best tool at the moment is to put a trigger on “App Start” that checks a user’s group memberships. This feature can be enabled manually on LTS13.1 by a Tulip team member if you reach out to your Tulip representative.

---

<div class="post-metadata">

**Author:** ![lauz](https://avatars.discourse-cdn.com/v4/letter/l/f1d935/32.png) [@lauz](https://community.tulip.co/u/lauz)\
**Post date:** [March 21, 2025, 7:53am UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/7 "2025-03-21T07:53:23Z")

</div>

hi @kevin.kononenko , is there a user manual available on how to set up the “If” statement in an app to check the user’s group membership? I couldnt find the selection in the drop down and we are in version 13.1.

 ![image](https://us1.discourse-cdn.com/flex020/uploads/agilemfg/original/2X/5/5f975475028c8e28e83290b97b14bf700b992163.png)

---

<div class="post-metadata">

**Author:** ![kevin.kononenko](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kevin.kononenko/32/32_2.png) [@kevin.kononenko](https://community.tulip.co/u/kevin.kononenko)\
**Post date:** [March 21, 2025, 2:06pm UTC](https://community.tulip.co/t/user-access-management-integration-with-saml/14048/8 "2025-03-21T14:06:10Z")

</div>

Hi Shawn, were you able to talk to your Tulip representative to have that feature manually turned “on”? It is not turned on by default until LTS13.4.
