# SSO and Restricted Groups

**URL:** <https://meta.discourse.org/t/sso-and-restricted-groups/58098>\
**Category:** SSO\
**Created:** [February 28, 2017, 4:45pm UTC](https://meta.discourse.org/t/sso-and-restricted-groups/58098 "2017-02-28T16:45:58Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [February 28, 2017, 4:59pm UTC](https://meta.discourse.org/t/sso-and-restricted-groups/58098/2 "2017-02-28T16:59:17Z")

</div>

> [@Thor\_Mitchell](#):
>
> My other option is to have our SSO Provider indicate if a user is a member of the User Panel in the payload using the add\_groups attribute. However users can be added to the User Panel at any time. Is the add\_groups attribute evaluated every time a user logs in to Discourse,

Yes add\_groups is evaluated every time they log in, so it should sort out the issue perfectly.

---

_[View the full topic](https://meta.discourse.org/t/sso-and-restricted-groups/58098)._