# Organization Groups: Structure Your Organizations with Hierarchical Group Management

DevFeed: [Organization Groups: Structure Your Organizations with Hierarchical Group Management](<https://devfeed.tech/articles/organization-groups-structure-your-organizations-with-hierarchical-group-management-31769.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2026/04/org-groups>)

Author: Vlasta Ramik

Published: 2026-04-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [structure](<https://devfeed.tech/topics/structure.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [saml](<https://devfeed.tech/topics/saml.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [b2b](<https://devfeed.tech/tags/b2b.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [structure](<https://devfeed.tech/tags/structure.md>)

## AI overview

Keycloak 26.6.0 introduces Organization Groups, enabling isolated hierarchical groups within each organization. The article explains how to create and reorganize group hierarchies, assign users through identity-provider mappers, and include organization group memberships in OIDC tokens and SAML assertions.

## Source excerpt

Introduced in Keycloak 26.6.0, Organization Groups bring hierarchical group management to the Organizations feature. While Organizations already let you model Business-to-Business (B2B) relationships where external companies, partners, or departments each manage their own users, Organization Groups take this further by letting you organize members within each organization into logical teams, departments, or any structure that fits your needs. Why Organization Groups? Before Organization Groups, structuring members within an organization required workarounds using realm-level groups, which are shared across the entire realm. This creates problems in multi-tenant scenarios: if Organization A and Organization B both need an "Engineering" group, they'd collide at the realm level. Organization Groups solve this by giving each organization its own isolated group hierarchy. Organization A's /Engineering/Backend and Organization B's /Engineering/Backend are completely separate groups with their own members, attributes, and identifiers. No naming conflicts, no cross-organization leakage. Creating a Group Hierarchy Groups can be nested to mirror real-world organizational structures: /Engineering /Engineering/Backend /Engineering/Frontend /Sales /Sales/APAC /Sales/EMEA /Sales/LATAM /Sales/NA Creating groups is straightforward: navigate to your organization, click the Groups tab, and click Create group. To build hierarchies, select a parent group before creating a child group, or use Move to to reorganize existing groups. Automatic Group Assignment via Identity Providers One of the most powerful capabilities is automatic group assignment during federated authentication. When an identity provider is linked to an organization, two mapper types are available: Hardcoded Group assigns every user authenticating through the IdP to a specific organization group. Useful for scenarios like "everyone from this corporate IdP goes into the Engineering team." Advanced Claim to Group maps use