# SAML Security grants not visible **URL:** \ **Category:** Ignition\ **Tags:** ignition83\ **Created:** [March 17, 2026, 9:23am UTC](https://forum.inductiveautomation.com/t/saml-security-grants-not-visible/114520 "2026-03-17T09:23:47Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 17, 2026, 9:23am UTC](https://forum.inductiveautomation.com/t/saml-security-grants-not-visible/114520/1 "2026-03-17T09:23:47Z")
Hi, I can “Test Login” my SAML Identity provider, and it returns a username and ID correctly. In Security\>Levels, I have authenticated roles Administrator and User setup. Security Level Grants after testing login is Public\>Authenticated, nothing else. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/f/afe33011d35065805b1a0a978f1b09c0e51aa1c5.png) enticated. Under Roles, it’s empty. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/f/0ff81f71e888bfe16607ff6b317105bb5fd829c3.png) ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/2/f2439c8db6fa4fef041cf06cac435ba1f6765c46.png) How do I properly configure the roles here? ---
**Author:** ![gmatano](https://avatars.discourse-cdn.com/v4/letter/g/b5ac83/32.png) [@gmatano](https://forum.inductiveautomation.com/u/gmatano)\ **Post date:** [March 17, 2026, 2:16pm UTC](https://forum.inductiveautomation.com/t/saml-security-grants-not-visible/114520/2 "2026-03-17T14:16:30Z")
Do you have roles mapped/configured to the user you are testing the login with for that Idp? There is more information here in regards to Security Level Rules: [Security Level Rules | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.3/platform/security/identity-provider-authentication-strategy/security-level-rules) ---
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 17, 2026, 6:52pm UTC](https://forum.inductiveautomation.com/t/saml-security-grants-not-visible/114520/3 "2026-03-17T18:52:07Z")
The boxes are grayed out when I manually added a User to the IDP. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/7/1/713b0603cbdfb24c03a22564136cb8830481227c.jpeg) ---
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 17, 2026, 6:53pm UTC](https://forum.inductiveautomation.com/t/saml-security-grants-not-visible/114520/4 "2026-03-17T18:53:57Z")
> [@gmatano](#): > > There is more information here in regards to Security Level Rules: [Security Level Rules | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.3/platform/security/identity-provider-authentication-strategy/security-level-rules) I already have Administrator and User setup under Public\>Authenticated\>Roles\>Administrator|User. But I still can’t see the “Rules” textbox that this user manual page has. ---
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 17, 2026, 7:13pm UTC](https://forum.inductiveautomation.com/t/saml-security-grants-not-visible/114520/5 "2026-03-17T19:13:38Z")
Update: I added a new rule directly under Authenticated, instead of iteratively under Authenticaed\>Roles, and it is now showing up under Security Levels for SAML. It was confusing me earlier, as I thought that the items under Role would inherit from Authenticated and show up. Fixed now.