Also - when the user is removed from the group, are we talking about the keystone group, or the group from the assertion?
Also - when the user is removed from the group, are we talking about the keystone group, or the group from the assertion?