Maybe better to list out the SSO group memberships in the sign in payload like this:
...
"group_memberships":
{
"group_a": true,
"group_b": false
}
...
That way listed memberships are updated, but unlisted memberships are not touched.
3 إعجابات