The procedure whose name is configured in the system setting SingleSignOnActiveDirectorySignInProcedure is called each time a user signs in using Advanced Active Directory Single Sign-on. Its purpose is to customize the user's account and permissions. You can leave SingleSignOnActiveDirectorySignInProcedure empty if you do not need a custom procedure, and users will still be able to sign in.
You are allowed to call SoftadminApi.User_InsertUpdate if you need to modify the user but you must not change the username or disable the user.
To access information about the user's group memberships, you can refer to a temporary table #AdGroup containing group names. This temporary table will only include group names that are also present in the SoftadminApi.AdGroup table.
CREATE TABLE #AdGroup
(
ADGroup varchar(8000)
);