Yes, that's right. We're just struggling with the best way to achieve it really - as currently, on the web version, those signing in via OIDC actually go to a different subdomian (and then it automatically logs them in and assigns them to their specific group) - whereas manual go to the normal webpage. We've kept them separate to avoid users knowing about the manual or OIDC options from one another and so that our system knows users visiting the subdomain and connecting via OIDC belong to that particular group - if that makes sense.
Oh man, it's hurting my brain. Haha.