Looking at the documentation for SSO, it appears that the only way to modify user groups is to specify a set of groups to add or a set of groups to remove… is there any way to simply specify a set of groups that the user should be in, and let the system add/remove groups as necessary to match?
To get that you must pass all the groups the user should be in at add_groups and all existing groups that the users shouldn’t be in remove_groups.
6 Likes