# Import Groups from Okta

**URL:** <https://forum.keycloak.org/t/import-groups-from-okta/18315>\
**Category:** Configuring the server\
**Tags:** identity-brokering, oidc\
**Created:** [November 8, 2022, 2:37am UTC](https://forum.keycloak.org/t/import-groups-from-okta/18315 "2022-11-08T02:37:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mlbiam](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/mlbiam/32/6967_2.png) [@mlbiam](https://forum.keycloak.org/u/mlbiam)\
**Post date:** [November 8, 2022, 2:37am UTC](https://forum.keycloak.org/t/import-groups-from-okta/18315/1 "2022-11-08T02:37:21Z")

</div>

I have my KeyCloak (20) integrated with Okta as an identity provider over openid connect v1. I’m getting the groups as a claim from the user\_info endpoint, but how can I map groups from that claim to a keycloak group dynamically? I can to an Advanced Claim to Group mapping for each group, but that seems to be a very manual process. Is there a way to do this dynamically at SSO?

Thanks  
Marc

---

<div class="post-metadata">

**Author:** ![andrejvanderzee](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/andrejvanderzee/32/6970_2.png) [@andrejvanderzee](https://forum.keycloak.org/u/andrejvanderzee)\
**Post date:** [November 8, 2022, 9:18am UTC](https://forum.keycloak.org/t/import-groups-from-okta/18315/2 "2022-11-08T09:18:38Z")

</div>

I am looking for the same capability to dynamically map groups from a social login claim to keycloak groups.