Description Julia Bremer 2024-03-13 09:04:00 CET

If one enabled Keycloak 2FA as it is described in our manual, a Keycloak group mapper will be created.
While that group mapper contains sensible defaults (e.g. only map groups under cn=groups,$base),
this may not necessarily fit for every customer and they would need to adjust the mapper.

We have a section about group mappers in the section about the "App authorization" feature, that explains how and what to sync. 
We should link to that one in the 2FA section.