After a user group tagging is removed in customer AD, next time when this user login via SSO and group names is not there in SAML payload response also, the current SAML-based SSO in ARIS UMC can be enhanced to include un-assigning user from user group.