Hi all, I'm experiencing problems with managing groups and authenticating over OIDC with Azure AD. So the first thing I did was create an ingestion recipe to ingest users from AD as well as map respective groups to each user. After this I set up the sso through the docker environment file and restarted the container. When I sign in through sso however, the AD groups that were mapped to the user and ingested into datahub are removed. I've made a bug report on github but I was wondering if anyone else has seen this before. I've tested this on v0.9.6, v0.9.5, and v0.9.3. (v0.9.4 has a looping error where you cannot autheticate through OIDC)

Hi! Do you have

auth.oidc.extractGroupsEnabled

set to true? This will override existing groups by doing an extraction from the OIDC Provider. Looks like we have a note about this on the Okta guide, but not on the Azure one

It worked! thanks for the help