OpenID Connect: Default group for the identity provider users

[KWMORALE]

Feature Category

• [x] Correctness
• [x] User Interface / User Experience
• [ ] Performance
• [ ] Other (please explain)

Describe the problem

All users whose identities can be provided by the external identity provider are not associated with it in any way other than the ability to authenticate.

Describe the solution you'd like

Create a new user group that corresponds to a given identity provider. Add to it each user who has an identity associated with the given identity provider.

Describe alternatives you've considered

Multiple groups referring to organizations authenticating through the same identity provider. However, this implementation may be treated as improvement.