Authentication

Currently, we are using the synchronization plugin with Azure through OpenID Connect and O365. We managed to perform the synchronization, but we have 200,000 users, and only a portion of them should be used to log into Moodle, around 2,000 people. We restricted access via group, but the plugin does not directly access the group; it reads the entire tenant until it reaches the users in the group and still does not bring all the fields, requiring more synchronizations to increment the data. I would like to know if there is already a way for the plugin to read the group directly and not the entire Azure tenant. We are running the full synchronization because, without it, the plugin does not reach the users in the group. We created a restriction by group.