JWT SSO - enable ability to not override groups | Product Feedback Forum

David Robinson · 2026-07-03T15:17:01.700540Z

With the Set Roles from Groups > Define by Group option we can sync groups with the specified Groups claim. Though we have instances where it would be ideal if we could specify 'do not override/sync groups' for this JWT, but apply normally if the groups claim is present.The use case being we don't have full control over the upstream IDP and reliably identifying a valid set of groups. In such an instance, we can apply groups via the JWT where we are confident in the group allocation decision, but have to perform a lookup to some state (i.e. Sisense REST API) to ensure we don't revert any manual updates applied to a selection of users.

Discussions

JWT SSO - enable ability to not override groups | Product Feedback Forum | Sisense Community