# OpenID Connect group can kick users out of all unsynced groups

**URL:** https://meta.discourse.org/t/openid-connect-group-can-kick-users-out-of-all-unsynced-groups/402416
**Category:** Bug
**Tags:** sso, openid-connect
**Created:** [May 7, 2026, 5:46pm UTC](https://meta.discourse.org/t/openid-connect-group-can-kick-users-out-of-all-unsynced-groups/402416 "2026-05-07T17:46:29Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [May 7, 2026, 7:00pm UTC](https://meta.discourse.org/t/openid-connect-group-can-kick-users-out-of-all-unsynced-groups/402416/3 "2026-05-07T19:00:52Z")

</div>

Can you let me know if this summary is correct?

- prior state:
  - user `bilbo` is in groups `A`, `B`, `C` on Discourse
  - groups `B` and `C` are set up for automatic membership with OIDC groups `b` and `c` (respectively)
  - `OpenID Connect groups claim` is set to e.g. `groups`

- action taken:
  - user `bilbo` logs in via OIDC
  - oidc claim contains groups `c`, `d`
  - (group `D` does not exist on Discourse)
  - Discourse removes `bilbo` from groups `A` and `B`  
❗ removing the `A` group membership is incorrect

---

_[View the full topic](https://meta.discourse.org/t/openid-connect-group-can-kick-users-out-of-all-unsynced-groups/402416)._