So this only happens after you've removed the user from the group using the IDP? Which results in a empty list of groups in the assertion?
So this only happens after you've removed the user from the group using the IDP? Which results in a empty list of groups in the assertion?