Crowd does not always auto add application groups when SSO is enabled

Summary

Auto add groups were added at the application level in Crowd 3.1 Release Notes. We have confirmed that without SSO, the auto-add groups are working as intended, triggering the add on with each authentication that occurs with a Crowd enabled application.

However, it doesn't appear that this functionality is working with any subsequent applications that are authenticated via Crowd SSO.

Environment

• Crowd 3.1, Jira 7.6, Confluence 6.6

Steps to Reproduce

1. Integrate Crowd to Confluence with SSO Enabled
2. Integrate Crowd to Jira with SSO Enabled
3. Applications > Confluence
4. Click on the Directories & Groups tab
5. In the Actions menu, click Configure automatically assigned groups and select a group. Save your changes.
6. Repeat steps 3 - 5 for the Jira application.
7. If logged in, log out of both applications Jira & Confluence.
8. Log into Confluence. Query the cwd_user_attribute table for your user and note that an attribute has been added denoting autoGroupsAdded
9. Navigate to Jira and log in.

Expected Results

You will be added to the auto-add groups configured for the Jira application in Crowd.

Actual Results

You are not added to the auto-add groups and no additional cwd_user_attribute is added to your test user record.

Workaround

There is no workaround at this time.