Enhance Automatic Member removal section of docs

45dafd6a · Alvin Gounder · Evan Read · 82398ffa · 45dafd6a
Commit 45dafd6a authored Nov 22, 2021 by Alvin Gounder Committed by Evan Read Nov 22, 2021
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

doc/user/group/saml_sso/index.md doc/user/group/saml_sso/index.md +4 -1

No files found.
--- a/doc/user/group/saml_sso/index.md
+++ b/doc/user/group/saml_sso/index.md
@@ -377,7 +377,10 @@ Users granted:
 ### Automatic member removal

 After a group sync, users who are not members of a mapped SAML group are removed from
-the GitLab group.
+the GitLab group. Even if SSO authentication is successful, if an existing user is not a member of any of the configured groups:
+
+- They get an "unauthorized" message if they try to view the group.
+- All of their permissions to subgroups and projects are also removed.

 For example, in the following diagram: