document idp groups

[terrbear]

i think this is already done, looking at the usermgmt->groups page. there's also group syncing for idps, but that'll be covered in azure/gsuite docs.