the front-end validation on the group name field does not accept underscore characters. the back-end, however, supports this.

we have a customer (and potentially others) whose group names in their IdP contain underscores, so the front-end should support this.