Automatic group synchronization

This page describes the automatic group synchronization solution in SonarQube Cloud.

When using Single Sign-On (SSO) authentication with Just-in-Time (JIT) provisioning, user groups are synchronized automatically. See the User group concept page for more information about user groups in SonarQube Cloud.

With the automatic group synchronization:

• A user in SonarQube Cloud is automatically added to an organization’s group within the enterprise if the user is a member of a group with the same name in the IdP. (The check is case-sensitive and excludes the organization’s default Members group.)

• The users added to a SonarQube Cloud group become members of the respective organization. This is the only way an SSO user is added to an organization. Note that if a user cannot be added to any group in SonarQube Cloud, they will land on an empty organization page.

If a group with the same name is assigned to several organizations, the user account is added to all these groups and thus, is a member of all these organizations.

SSO users' group memberships are reset to match those in your identity provider upon login. If you add an SSO user to a SonarQube Cloud group that doesn't exist in the identity provider, the user will be removed from that group on their next login.

Related pages

• Single Sign-On

• Managing user groups