# Setting groups on SSO

**URL:** https://meta.discourse.org/t/setting-groups-on-sso/77393
**Category:** SSO
**Created:** [January 6, 2018, 10:45pm UTC](https://meta.discourse.org/t/setting-groups-on-sso/77393 "2018-01-06T22:45:48Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![edahlseng](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/edahlseng/32/95420_2.png) [@edahlseng](https://meta.discourse.org/u/edahlseng)
#### Post date: [January 6, 2018, 10:45pm UTC](https://meta.discourse.org/t/setting-groups-on-sso/77393/1 "2018-01-06T22:45:49Z")

</div>

Looking at the documentation for SSO, it appears that the only way to modify user groups is to specify a set of groups to add or a set of groups to remove… is there any way to simply specify a set of groups that the user should be in, and let the system add/remove groups as necessary to match?

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [January 7, 2018, 1:27am UTC](https://meta.discourse.org/t/setting-groups-on-sso/77393/2 "2018-01-07T01:27:25Z")

</div>

To get that you must pass all the groups the user should be in at `add_groups` and all existing groups that the users shouldn’t be in `remove_groups`.