When the user which will log in are not the group specified by oidc.groups.allowed, he will see only an internal error 500. And his session create on the IDP will not destroyed, this can be an security problem. See more here.
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.
