Your question
Is it possible for a user on one domain to be added to a group on another when using and OIDC directory?
If the user is on $domain-a, and are added to a group on $domain-b, it shows up in the management UI, but as soon as the user signs in via OIDC (groupsClaim is null!) the group is removed.
Notably, impersonating the user with the admin user (stella@domain-a%admin) does not remove the group when signing in.