Refresh sso groups

When/how would that happen?