At the moment of writing, yes with some conditions.


SSH Professional does not currently support mapping groups from IdP to posix groups, assignment of groups to tags, or assignment of groups to users. (However, such features are high-up on our product roadmap.) This means that while SSH Professional creates and manages users for host devices, it currently is unable to assign them to groups.


To get SSH Professional to work with AllowGroups, one would need to wait for SSH Professional to provision the users on each host device, and then it is possible to add these users to the specified groups out-of-band.