...
Alternatively, group claims can be used to auto-create groups that are found in the group claims. This allows you to focus on managing groups inside your identity provider since Kantega SSO will create any group that does not exist within your Atlassian instance when a user has it within their group claims.
You can read more about group claims here: Group claims from Identity Provider
...
In addition to the more complex group management options shown above, you can also configure default groups that are added to all users authenticating with the identity provider. This is commonly used to add the license group in less complex environments.