It would be a nice feature if just-in-time provisioning could add a defined set of groups to newly created users when they login for the first time, similar to how we can define default group memberships for users logging in from an LDAP directory.