---
title: 'Tutorial: How to Set SAML for Specific Users and Groups'
canonical: https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-users-groups/
product: Access Server Docs
description: Access Server provides granular access control, including the ability to authenticate with SAML for specific users and groups. Here's how to set it up.
---

# Tutorial: How to Set SAML for Specific Users and Groups

## Overview

You can allow specific users and groups to sign in through SAML without setting it as the default authentication method for all of your Access Server users. Before you can do this, you must first configure SAML. Once you’ve configured and enabled SAML, you will have the option to add users and groups and configure them to use the SAML authentication system.

## Prerequisites

- SAML is configured in the Admin Web UI with your IdP.
- You have users or groups added in the Admin Web UI.

## Set SAML auth method for users or groups

1. Sign in to your Admin Web UI.
2. Click **Authentication**.
3. Click the **SAML** tab and ensure you have the information saved for your IdP. (Ensure you've correctly configured SAML with your IdP first.)
4. Enable SAML by clicking **Enabled** for **Enable SAML authentication**, then click **Save** and **Restart**.
5. You can now assign SAML to users or groups:
   - **For users:** Click **Users**, then click on the individual user, and select **SAML** from the **Auth method** drop-down.
   - **For groups:** Click **Groups**, then click on the specific group, and select **SAML** from the **Auth method** drop-down.

   > **Tip**
   >
   > You may need to uncheck **Use default setting** to change the user or group auth method.
6. After changing a user or group authentication method, click **Save** and **Restart**.

> **Important**
>
> When adding SAML users to Access Server, remember to enter them in the same format that the IdP uses, which is typically in lowercase format only. This is the format used by SAML assertions.

---

Prev: [Tutorial: How to Assign SAML as the Default Authentication](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-default-auth.md)
Next: [Tutorial: Setting up forced authentication (forceAuthn) for SAML users](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-forceauthn.md)
Index: https://openvpn.net/as-docs/llms.txt