After successful login with SAML in Microsoft Entra ID, Groups and permissions are not properly set.

There is no resolution on this topic. This issue happens because, as mentioned in the Microsoft Entra ID official documentation, when the hard limit of 150 Groups assigned to a user is reached, Microsoft Entra ID instead of providing a complete list of all the Groups in the SAML Response, provides a link to Graph.

This explained behaviour is not in the official SAML 2.0 scope, so the CloudBees CI SAML plugin is not prepared to consume this Graph link where all the Groups assigned to the user are listed, as mentioned in this issue.

Review your Groups assignment process to reduce the amount of Groups, for example, combining some groups into one with equivalent permissions, splitting controllers if there are several jobs in one controller…​