This one worked for me. cn=dev,ou=groups,dc=digital-nirvana,dc=com cn=devops,ou=groups,dc=digital-nirvana,dc=com cn=infra,ou=groups,dc=digital-nirvana,dc=com I got these values like this [dev, devops, infra] Thanks for sharing -- Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html