Locally managed groups are always overwritten on user login through OIDC.

[t-aleksander]

Currently, if directory synchronization is enabled, OIDC logins ignores the synchronization target (ALL, groups, users) and always synchronizes user's groups, causing potential overwrite of local group assignments (if users target is selected)