I am using ModelUser for SSO authentication. My understanding is that the operator ids that are generated when a new user logs in with SSO should have associated Ruleset same and workgroup same as ModelUser. But I see that 7 out of 10 (lets say 10 new users logged in with SSO autentication) have different associated Ruleset and extra workgroups. Please help me resolving the issue.
In that case, can you please check your code to ensure that the same Org, Div and Unit is used to lookup Model operator? If possible, log the value of Org, Div and Unit just before the step of Model Operator lookup.