Add section in "User&Group" tab to manage SSO groups. Only display this section if user have the rights to edit it.
Louis Chauvet