Add an OIDC default group about alpine HOT 1 CLOSED

And any user profile's groups list will be set as a list containing this string.

If I understand the code correctly, the teams from the claim are synced on each login: non-matching teams are removed, matching teams are added.

For the proposed OIDC_TEAMS_DEFAULT, if the teams are manually changed by and aministrator, I'd say those changes should persist and not be overwritten on the next login. So perhaps a sensible behavior is: if no teams are associated with this user yet, add the team(s) from OIDC_TEAMS_DEFAULT. Otherwise, leave the teams untouched.

This has the (arguable) downside that if you change OIDC_TEAMS_DEFAULT, existing accounts that are associated with 'old' default team will not be updated to switch to this 'new' default team. That seems reasonable to me, though.

from alpine.