Comment 14 for bug 1474284

Henry, that was never part of the design; users and groups come in from the IdP, and are expected to be in the same domain. I am worried about what will happen with both LDAP and Federation here; in both those cases, users are expected to be in the same group.

However, the SQL backend may very well allow this. If so, we should be able to point at the unit test that tests it. Do we have one?

As far as I understand, however, users and groups have to be in the same backend.