When integrating OneLogin with a target application using SCIM-based provisioning, group creation and assignment may not work as expected.
Users are provisioned successfully, but only a single group is created or assigned in the target system, even when multiple roles or groups are configured in OneLogin.
Additionally, the target application may block manual group creation and require all group management to occur through the identity provider.
A OneLogin application rule might have been configured to send directory-based MemberOf attributes instead of OneLogin Roles in the provisioning payload.
In this configuration:

MemberOf attribute.If further assistance is required please contact Support
© 2026 ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center