Automatically assigned groups feature does not work when SSO is enabled and the user already exist in the application

Issue Summary

This issue is related to this closed bug report: CWD-5077: Crowd does not always auto add application groups when SSO is enabled (fixed in Crowd 3.3.0).

Although, the bug report was technically closed and fixed. There is one scenario where it fails. Users are not automatically added to the application groups if.

• SSO is enabled and,
• The user already exist in the application.

Steps to Reproduce

1. Integrate Crowd to Confluence with SSO Enabled
2. In Confluence, ensure that a user A already exists and not assigned to any group.
3. Head over to Crowd > Applications > Confluence
4. Click on the Directories & Groups tab
5. In the Actions menu, click Configure automatically assigned groups and select confluence-administrators group or any group that has the permission to login to Confluence. Ensure that user A exists in that group.
6. Save your changes.
7. Navigate to Confluence and attempt to login as the user.

Expected Results

The user A is able to login because the user is assigned automatically to or to confluence-administrators

Actual Results

The user A cannot login, because the the user is not assigned automatically to the confluence-administrators

Note

The above was tested on Crowd with Confluence, but based on the customer's experience, this might be happening in all other applications.

Workaround

• Ensure users are not synchronized to Confluence before both
  • Configuring automatically assigned groups options.
  • Users attempting to login.