TheĀ SSO class reads user groups saved under the key sso_groups inĀ global/overlay/etc/hiera/data/common.yaml.

So to add/remove a single user simply edit the relevant group.

Each instance of the SSO class will have a different set of allowed user groups, specified via class parameter "groups".

After the group list has been edited the Docker container sso needs to be restarted for the changes to take effect:

systemctl restart sso.service