We have a customer who uses PingFederate as their IDP and they are able to fetch group claims via memberOf, but Coder does not use this to sync groups, it only looks at the groups claim.