@jdaviescoates so here is my config which works well and gets around the admin group issue.
In the OIDC NC app config:
[image: 1761898465348-d83b7885-4c11-4657-a8ec-04de244e47e7-image.png]
Then you create a group folder per NC group, and when you add a user to Cloudron and add to a specific Cloudron group, it gets automatically added to the corresponding MC group and gets access to the group folder associated with that group.
In addition, in order not to confuse users with the NC login form I now disable other login methods using this command: occ config:app:set --value=0 user_oidc allow_multiple_user_backends
and set a custom end point to my Cloudron dashboard when people try to log out of Nextcloud:
[image: 1761898688780-4316b19b-2691-44b7-b6ec-5fc19a0f335c-image.png]