Question
Premier Bankcard
US
Last activity: 7 Apr 2025 3:22 EDT
Pega and Azure AD Group Based Permissions
Is it possible to allow groups from our Azure AD instance access into Pega? If so, how would a person configure that? I have been looking everywhere trying to find some documentation on how to add groups from Azure AD into Pega and I am coming up short.
We would like to provision Group Based Access in Pega by utilizing our current Azure AD groups and I am not finding a way to do that as of yet.
Updated: 7 Apr 2025 3:22 EDT
Pegasystems Inc.
PL
I believe what you are looking for is SSO SAML 2.0 authentication.
SSO also allows you to create and customize new Pega operator based on a model operator through a Data Transform: Configuring operator provisioning for a SAML SSO authentication service
Sadly I don't have an easy step by step guide, but I can point you to the documentation, especially these chapters:
Mapping operator information for a SAML SSO authentication service
Specifying preauthentication and postauthentication activities for a SAML SSO authentication service
As you can see in these docs, you can map some of incoming properties and use pre/post authentication activities to edit Operator record, i.e. find an attribute carrying AD group info and build the rest of the logic in Pega around that attribute.
PS. see also this post here: Azure AD Group to Work group Mapping | Support Center
I believe what you are looking for is SSO SAML 2.0 authentication.
SSO also allows you to create and customize new Pega operator based on a model operator through a Data Transform: Configuring operator provisioning for a SAML SSO authentication service
Sadly I don't have an easy step by step guide, but I can point you to the documentation, especially these chapters:
Mapping operator information for a SAML SSO authentication service
Specifying preauthentication and postauthentication activities for a SAML SSO authentication service
As you can see in these docs, you can map some of incoming properties and use pre/post authentication activities to edit Operator record, i.e. find an attribute carrying AD group info and build the rest of the logic in Pega around that attribute.
PS. see also this post here: Azure AD Group to Work group Mapping | Support Center
I hope that's enough for you to start