diff --git a/lib/web/auth/saml/index.js b/lib/web/auth/saml/index.js
index 3ecbc6f3..b8d98340 100644
--- a/lib/web/auth/saml/index.js
+++ b/lib/web/auth/saml/index.js
@@ -20,14 +20,14 @@ passport.use(new SamlStrategy({
   identifierFormat: config.saml.identifierFormat
 }, function (user, done) {
   // check authorization if needed
-  if (config.saml.externalGroups && config.saml.grouptAttribute) {
+  if (config.saml.externalGroups && config.saml.groupAttribute) {
     var externalGroups = intersection(config.saml.externalGroups, user[config.saml.groupAttribute])
     if (externalGroups.length > 0) {
       logger.error('saml permission denied: ' + externalGroups.join(', '))
       return done('Permission denied', null)
     }
   }
-  if (config.saml.requiredGroups && config.saml.grouptAttribute) {
+  if (config.saml.requiredGroups && config.saml.groupAttribute) {
     if (intersection(config.saml.requiredGroups, user[config.saml.groupAttribute]).length === 0) {
       logger.error('saml permission denied')
       return done('Permission denied', null)