IdP as the source of truth for IdP group membership changes