When a user logs in for the first time through OIDC in a Constellation application, the user profile is initially created with a guest access group having minimal privileges using model operator. During the post-login activity, the system logic updates the user’s access group based on specific business rules (e.g., user type, organization, or mapped roles).

However, even after the access group is successfully updated in the post-login step, the portal continues to load under the old guest access group context, causing the portal and dashboard views to fail or display incomplete content. This appears to be due to the Constellation portal initialization occurring before the access group change takes effect.

A solution or workaround is needed to ensure that once the post-login activity updates the access group, the subsequent portal session reflects the new access group context, so the correct Constellation portal and dashboard are loaded.