If we turn on sso overrides groups, which I’d like to do, suddenly, we’re going to get a lot more groups in our instance. Mostly, that’s okay, but I want “Who can see this group’s members?” to default to logged-in users. Is this possible?
AI-generated summary
Default Visibility Settings for Groups
mattdm is looking to change the default visibility settings for groups, specifically “Who can see this group’s members?”, to logged-in users after enabling sso overrides groups.
Falco clarified that sso overrides groups does not automatically create groups, and manual groups need to be created with the desired visibility level. He suggested using API calls for large numbers of groups.
mattdm confirmed his understanding of the process, stating that if he enables sso overrides groups, logging out and back in will update his group membership to reflect only the groups that exist in both the manual and SSO systems.
Falco confirmed mattdm’s understanding, stating that the membership will be configured accordingly if the SSO implementation sends the groups parameter.
sso overrides groups doesn’t create the groups for you. You need to create the necessary groups and set the necessary visibility level you want.
For large numbers of group you can use API calls to automate.
Oh, interesting. I assumed “override” was a big hammer. I’m glad I’m asking these questions.
Right now, we have two manual groups, and, like I mentioned in another thread, 1200+ groups in the SSO system. I am personally a member of 33 such groups.
One of our manual groups has a name corresponding to an SSO group. The other doesn’t. So, as I understand it right now, if I am a member of both current manual groups, and a member of the one that overlaps in SSO, and I turn on sso overrides groups and log out and back in again, the result will be that I will be only a member of the one group that exists both places. Correct?
Correct. If your SSO implementation sends up the groups parameter and you enable the setting for us to use it, we will ensure that the membership will be configured accordingly.