To be more explaining.

This is part of our xwiki.cfg:

#-# List of groups that a new user should be added to by default after registering. Comma-separated list of group
#-# document names.
#-# The default list depends on the value of xwiki.authentication.group.allgroupimplicit:
#-# 0: created users are added to XWiki.XWikiAllGroup group page
#-# 1: created users are not added to any group page (but they will virtually be part of XWiki.XWikiAllGroup group)
# xwiki.users.initialGroups=XWiki.XWikiAllGroup

#-# Should all users be considered members of XWiki.XWikiAllGroup, even if they don't have an associated object in the
#-# group's document?
# xwiki.authentication.group.allgroupimplicit=0 

{}The problem is:

• we use initialGroup XWiki.XWikiAllGroup to set some basic view right like layout, sandbox, help, menu etc.
• then user logs in and gets groups from AD for special purposes
• OIDC plugin adds groups from the AD to the user profile
• OIDC plugin removes group XWiki.XWikiAllGroup from the user because this group are not in the AD
• (a simple fix for us could be to map the base group to an All AD group: but this isn't existing in AD)

Was I able to make myself reasonably clear?