r@yElr3y , yes IDP is sending group attributes but it looks Pulse is expecting attribute -samlMultiValAttr.groups , which is  not defined under group claim on azure IDP as azure can only send default attributes. which looks to be issue , not sure how to proceed further . ... View more

Hello , I am also looking to enable MFA with existing Pulse  with above SAML based document  and configured everything , howoever keep facing issue  on SAML responce as samlMultiValAttr.groups attributes  is not matching while responce and does not allow to connect    ... View more