Configuring user and administrator groups

Last Updated : Jun 10, 2026 |

About this task

A group defines a set of users on OKTA. You must create the following groups on OKTA:

  • User group.

  • Administrator group, which is used for administration purposes.

You also use these group settings to configure attribute mapping between OKTA and Keycloak.
Note:

The SSO capabilities are available to members of both these groups.

Procedure

  1. Log in to the OKTA administration portal as the administrator.
  2. Navigate to Directory > Groups.
  3. Create an administrator group as follows:
    1. Click Add Group.
    2. In Name, type a name of your choice.

      For example, Admin.

    3. In Group Description, type a description for the group.
    4. Click Add Group.

      OKTA displays information about the created group.

    5. Remember the Name value.

      You will use this value later when configuring attribute mapping on Keycloak.

  4. Create a user group as follows:
    1. Click Add Group.
    2. In Name, type a name of your choice for the group.

      For example, User.

    3. In Group Description, type a description for the group.
    4. Click Add Group.

      OKTA displays information about the created group.

    5. Remember the Name value.

      You will use this value later when configuring attribute mapping on Keycloak.