Feature Request: Save groups to com.twocanoes.xcreds prefs between runs

[SoxIn4]

Optionally saving a user's groups to prefs between runs would allow admins to query group memberships for other uses. In particular, it would allow for easily using group membership as a condition for munki deployments.

[twocanoes]

can you explain a bit more? do you mean create a group in local OD based on the UUID from the group claim and then add the user to it?

[SoxIn4]

I want to be able to run `defaults read com.twocanoes.xcreds groups` and get a list of the logged in user’s entra group memberships. I'm not great at following swift code, but it looks like it might be saving a group list to prefs during a login to a "groups" key, but when I tried to retrieve that later, it wasn't found. It was a rushed test, so I may have done something wrong, but if not, a pref to let it keep the groups in prefs after a login would be really helpful.

[twocanoes]

added to local ds of mapped user each time the user logs in. Can get by reading attribute. For example:

dscl . -read /Users/brubble _xcreds_oidc_groups
dsAttrTypeNative:_xcreds_oidc_groups: 93392af1-8e10-4691-9702-a4d5e7f7c781;47b36644-8477-4194-b42d-9e519e9193e7