Make sure that the domain from which you will be selecting a group/user is added as an identity source. For instructions, read the Configuring SSO identity sources section of this chapter.
