Hi all, I’m trying to perform a search for all employees whose role do not have the SAML Single Sign-on permission (which I know are only Admins). If I try Role : Permission is SAML Single Sign-on and Role : Level is None, I get no results. If I try I Permission is SAML Single Sign-on and Role : Level is None I get admins but also people who I know have SAML enabled. Any tips?

Are you talking about the SAML setup permission, or the SAML login permission?

Login permission, for audit purposes we want a list that shows who doesn’t access through SAML

I think the problem is that you can have

SAML Single Sign-on : Full

, but you can't have

SAML Single Sign-on : None

in the role setup. If the role doesnt have that permission, then its just not listed.

If I try Role : Level is not Full I get the whole employee list

Not sure if a Saved Search is the best approach. If SAML permission is there, it shows as Full. But if SAML permission is not there, there is not a value saying

none

,

non full

,

empty

, etc. This is an example of a role without SAML. As you can see, there is nothing to compare against.

Ended up providing a list of admins, thanks for the input