This is now supported, read our SSO documentation for full info.
You can assign users to groups or reset the list of groups a user belongs to direct from the SSO payload.