# SSO groups without completely overriding

**URL:** https://meta.discourse.org/t/sso-groups-without-completely-overriding/166892
**Category:** Support
**Created:** [October 11, 2020, 1:33pm UTC](https://meta.discourse.org/t/sso-groups-without-completely-overriding/166892 "2020-10-11T13:33:24Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [October 11, 2020, 6:41pm UTC](https://meta.discourse.org/t/sso-groups-without-completely-overriding/166892/2 "2020-10-11T18:41:36Z")

</div>

> [@Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso)](https://meta.discourse.org/t/setup-discourseconnect-official-single-sign-on-for-discourse-sso/13045/1):
>
> Aside from `groups` , you may also specify group membership in your SSO payload using the `add_groups` and `remove_groups` attributes regardless of the _sso overrides groups_ option.
> 
> `add_groups` is a comma delimited list of group names we will ensure the user is a member of.  
> `remove_groups` is a comma delimited list of group names we will ensure the user is **not** a member of.

The `add` and `remove` parameters do exactly what you need.

---

_[View the full topic](https://meta.discourse.org/t/sso-groups-without-completely-overriding/166892)._