Grafana 7 and okta auth

Grafana
1

I’m attempting to set up Okta Auth using the official 7.01 docker container. If I don’t specify a group in “allowed_groups” users can login with Okta. If I do specify a group I get “User not a member of one of the required groups”, but I can very clearly see that the user is part of the specified group in Okta. The logs for my Okta app show that I have successfully authenticated. Am I simply hitting the limits of what the free version allows and I need to pay for Enterprise if I want to specify the groups that can log in? Is specifying the “allowed_groups” part of the Team Sync feature? I have setup Okta is accordance with the documentation https://grafana.com/docs/grafana/latest/auth/okta/

Relevant logs from the grafana container
grafana_1 | t=2020-06-01T21:24:53+0000 lvl=info msg=“Request Completed” logger=context userId=0 orgId=0 uname= method=GET path=/login/okta status=302 remote_addr=xx.xx.xx.xx time_ms=0 size=299 referer=https://myserver.com:3000/login
grafana_1 | t=2020-06-01T21:24:53+0000 lvl=info msg=“state check” logger=oauth queryState=xxxxxx cookieState=xxxxxx
grafana_1 | t=2020-06-01T21:24:54+0000 lvl=eror msg=“User not a member of one of the required groups” logger=context userId=0 orgId=0 uname=
grafana_1 | t=2020-06-01T21:24:54+0000 lvl=info msg=“Request Completed” logger=context userId=0 orgId=0 uname= method=GET path=/login/okta status=302 remote_addr=xx.xx.xx.xx time_ms=849 size=29 referer=

2

Did you work this out? I have the same issue

3

You have to set correct groups claim filter in OKTA - something like:
groups clam filter = groups and use regex ".* "