Filtering groups from IDPs

We recommend using IDPs (identity providers) to import users and teams.

Currently, there aren't filtering rules in place to programmatically determine which teams are imported into Cortex. 

Cortex will not import upstream groups by default. Instead, users will be shown their upstream groups and will have the ability to select which groups to import.

Once these groups are imported, they are synced in the Cortex backend, but a team is only explicitly created when one of the following actions is taken:

• A team is defined in a x-cortex-owner tag in the YAML

At this time, Team Hierarchies are established manually by a user.