In scenarios with enterprise IdPs (e.g., Entra ID, Okta), dynamic group mapping can be used instead of static mapping. For example, the IdP may emit a group or groups claim containing one or more values, which can be attached to the token scope and resolved into Artifactory groups dynamically. GitHub does not provide such a claim in its OIDC tokens, so an explicit, static group called frog-company-devs is assigned in our above example..
## The below is for illustration, (based on this example in our Dynamic Mappings doc):
If an IdP token includes the claim:
"groups": "devs,admins,qa"
and the mapping uses:
"groups_pattern": "{{groups}}"
then Artifactory would resolve this into:
applied-permissions/groups:"devs","admins","qa"