sources/scim: fix all users being added to group when no members are given (#14645)

Signed-off-by: Jens Langhammer <[email protected]>

Author: BeryJu

authentik/sources/scim/views/v2/groups.py

@@ -97,7 +97,8 @@ def update_group(self, connection: SCIMSourceGroup | None, data: QueryDict):
                     self.logger.warning("Invalid group member", exc=exc)
                     continue
                 query |= Q(uuid=member.value)
-            group.users.set(User.objects.filter(query))
+            if query:
+                group.users.set(User.objects.filter(query))
         if not connection:
             connection, _ = SCIMSourceGroup.objects.get_or_create(
                 source=self.source,