Let us assume that you have an external identity provider configured... 

You need to change these setting under the Identity Provider setting:

![A](01.png)

---

![B](02.png)

---

![C](03.png)

---

Make a group:

![D a](04a.png)

---

![D](04.png)

---

![E](05.png)

---

![F](06.png)

---