Before reporting an issue

• I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

docs

Describe the bug

In the sssd section of the server admin there is a note that says:

Keycloak registers groups and roles automatically but does not synchronize them. Any changes made by the Keycloak administrator in Keycloak do not synchronize with SSSD.

The first part of the sentence is perfectly OK, because in the current implementation the groups are imported when the user is created the first time from sssd and never synchronized again. But the second part is confusing. The groups are never synchronized or updated from or to sssd, they are just imported the first time and nothing else.

This issue will be used to clarify the current behavior.

Version

26.0.7

Regression

• The issue is a regression

Expected behavior

N/A

Actual behavior

N/A

How to Reproduce?

N/A

Anything else?

No response