Working on Rancher to setup ADFS authentication using JumpCloud as IdP. So authentication is working but every user have admin rights!?? Its not first time to set this kind of authentication and was always ok and working nice with groups membership and access permissions but in this case its fully not working correctly. Is anyone have similar experience with ADFS plugin or JumpClud IdP?

I believe you can change this default behavior... For my ADFS setup, I have "Standard User" set as "New User Default". Click on 3-horizontal bars on top left Select Users & Authentication Select Roles. What role do you have selected as "New User Default"?

UserBase, and also added adfs groups with user base roles, even added adfs groups to cluster members to view only role….but nothing apply authorization correctly. SAML send group assigned to user when I debug communication. Same group is listed in drop down when you try to add as member which confirms that rancher see it and read it. Very strange behavior we have here. I created many AD and Octa saml integrations before so I know how and where to setup all. Also no adfs users logged in is appearing in user list with adfs provider.