In the OIDC NC app config:

Then you create a group folder per NC group, and when you add a user to Cloudron and add to a specific Cloudron group, it gets automatically added to the corresponding MC group and gets access to the group folder associated with that group.

In addition, in order not to confuse users with the NC login form I now disable other login methods using this command: occ config:app:set --value=0 user_oidc allow_multiple_user_backends

and set a custom end point to my Cloudron dashboard when people try to log out of Nextcloud:

Ideally anyone on the Cloudron who is in the west-dorset-commons Cloudron group would automatically also have access to the West Dorset Commons folder within Nextcloud - has anyone found a way to do that yet?

Yes I've got that working. I can't write now but I'll get back to you shortly.

@avatar1024 I'm wondering how you do your Nextcloud onboarding? I've got a e.g a shared folder on my Nextcloud for West Dorset Commons, and a Cloudron Group called west-dorset-commons...

At present, before I can share the WDC folder with WDC members, they first need to login to the Nextcloud (because until they do it doesn't know they exist, even though they already exist on Cloudron).

Ideally anyone on the Cloudron who is in the west-dorset-commons Cloudron group would automatically also have access to the West Dorset Commons folder within Nextcloud - has anyone found a way to do that yet?

are Cloudron groups not LDAP

Yes, Cloudron groups are not in LDAP currently. Currently, if you want to restrict to a group, you can do this already. But if you want groups to sync, that's not implemented. Feel free to open up a feature request to implement this and we can guage the interest.