Issue Summary

Provisioning users with certain application access does not add them to the default access groups for that application

Steps to Reproduce

1. Provision a user from an external IDP. The user is part of a provisioned group that grants access to a certain application

Expected Results

If the user is granted access to that application (via the group membership), then the user should also be added to the default application access group for that application (jira-users or confluence-users by default)

Actual Results

The user is only part of the provisioned group, hence having access to the application, but not to the bits that are protected by additional permissions granted to the default access groups

Workaround

Manually adding each user to the default application access group