You can pass the Group attribute in SSO reponse to assign users into Groups. A sample SSO response with Group attribute is listed below. Users will be automatically assigned into the groups that in the SSO respose. If SSO response includes a new group, the group will be automatically created by our system and added into your account. 

SSO Response Group Attributes Example

<saml:AttributeStatement>

 <saml:Attribute Name="Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

   <saml:AttributeValue xsi:type="xs:string">{{GroupName1}}</saml:AttributeValue>

   <saml:AttributeValue xsi:type="xs:string">{{GroupName2}}</saml:AttributeValue>

   <saml:AttributeValue xsi:type="xs:string">{{GroupName3}}</saml:AttributeValue>

 </saml:Attribute>

</saml:AttributeStatement>