SSO and Restricted Groups

[sam (Sam Saffron)]

@Thor_Mitchell

My other option is to have our SSO Provider indicate if a user is a member of the User Panel in the payload using the add_groups attribute. However users can be added to the User Panel at any time. Is the add_groups attribute evaluated every time a user logs in to Discourse,

Yes add_groups is evaluated every time they log in, so it should sort out the issue perfectly.