I had multiple issues, resolving them did the trick for me.
-
My group names needed to meet certain cirteria:
- must be at least %{min} characters
- must be no more than %{max} characters
- must only include numbers, letters, dashes, and underscores
- must be unique
- must be present
- must begin with a letter, a number or an underscore
- must end with a letter or a number
- must not contain a sequence of 2 or more special chars (.-_)
- must not end with a confusing suffix like .json or .png etc.
-
I did not understand that I needed to create the groups in advance. I thought that they would be created if they did not exist.
-
I needed to avoid caching in the sso-provider and ensure I get a refreshed list of groups etc.