Integration Data Administration : Authentication task tab
  
Authentication task tab
Use the Authentication task tab to specify security group options for use when user authentication is performed via a third-party scheme such as Shibboleth or LDAP.
Note the following:
Any new user submitted to 25Live will be placed in the default security group you specify here, unless the user is passed in with a valid security group that already exists in the Series25 database.
Two options are available for existing 25Live users (except for current system administrators):
Move the user from their current security group to any new group submitted with the user, as long as the security group already exists in the Series25 database.
Ignore any passed-in security group, so the user remains in their current 25Live security group.
Note: Any existing user already in the 25Live System Administrators security group (ID = -1) will never be moved from that group, regardless of the option selected here—even if a different, valid security group is passed in with that user.