Group SAML can configure which subgroup to add members to

Idea

Instead of having Group SAML add members to the top level group we could make it possible to configure which subgroup to add members to

Problems solved

One of the problems with having members added as guest to the top level group is that it makes it hard to have subgroups/subprojects where visibility is restricted. By not adding members to the main group itself we sidestep this. This overlaps with billing complexities because organizations can't easily add a second top level group

Potential problems

• Might be hard to migrate users when this setting is changed
• Might interact negatively with SCIM and need to be a joint setting
• Having a concept of teams that was independent of groups might be preferable to this. On the other hand this could be a first step in introducing such a concept as we could have a SsoTeam where members are added and derive membership from that.
• SCIM has a mechanism for group management that we might want to explore alongside this