The deployment guide for Cisco SDWAN / vManage SAML integration needs to be updated. The only reference it has to App Assignments is on a per user level. There needs to be a reference that group assignments need to match exactly the groups defined in vManage, or the users will not get any rights in vManage after they successfully authenticate via SAML.
This is the OKTA page in question:
“Okta Help Center (Lightning)”
This is the Note on the Cisco page
Note : Groups must match with the Cisco vManage groups and they need to be in lower case.
And this Cisco Vmanage / Okta deployment page that note came from: