# SSO groups not added to User

**URL:** <https://meta.discourse.org/t/sso-groups-not-added-to-user/149604>\
**Category:** SSO\
**Created:** [April 28, 2020, 2:35pm UTC](https://meta.discourse.org/t/sso-groups-not-added-to-user/149604 "2020-04-28T14:35:20Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![ullriti](https://avatars.discourse-cdn.com/v4/letter/u/aca169/32.png) [@ullriti](https://meta.discourse.org/u/ullriti)\
**Post date:** [April 28, 2020, 2:35pm UTC](https://meta.discourse.org/t/sso-groups-not-added-to-user/149604/1 "2020-04-28T14:35:21Z")

</div>

Hi,

iam hosting discourse on my server.  
For SSO i use Keycloak in combination with [discourse-sso-oidc-bridge](https://github.com/consideRatio/discourse-sso-oidc-bridge).  
User creation, role assignment and all other features are working except the _add\_groups_, _groups_ and _remove\_groups_ values. The users will not be added to the defined groups, but with activated _sso overrides groups_ the user will be removed from all other groups.

I´ve created the groups in discourse before i logged in over SSO.  
I seems that discourse gets all required parameters (see below):

> **Verbose SSO log**
>
> Verbose SSO log: User was logged on tiloullrich
> 
> add\_groups:  
> admin: true  
> moderator:  
> avatar\_force\_update:  
> avatar\_url:  
> bio:  
> card\_background\_url:  
> email: [test@exapmle-mail.de](mailto:test@exapmle-mail.de)  
> external\_id: 7d7d5c3c-1854-46d6-8c54-a4f45626ea58  
> groups: [‘exampleGroup’, ‘test’]  
> locale:  
> locale\_force\_update:  
> logout:  
> name: Example User  
> nonce: a69b0ff2c31058318351e9274fea4d42  
> profile\_background\_url:  
> remove\_groups:  
> require\_activation:  
> return\_sso\_url: /session/sso\_login  
> suppress\_welcome\_message:  
> title:  
> username: exampleuser  
> website:  
> location:

---

_[View the full topic](https://meta.discourse.org/t/sso-groups-not-added-to-user/149604)._