From adab2ca037fc1055bada58186375792ca9561a5b Mon Sep 17 00:00:00 2001
From: Pedro Igor <pigor.craveiro@gmail.com>
Date: Wed, 7 Jan 2026 05:49:54 -0300
Subject: [PATCH] Avoid multiple calls to LDAP when querying group memberships

Closes #44558

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
---
 .../ldap/mappers/membership/group/GroupLDAPStorageMapper.java   | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/group/GroupLDAPStorageMapper.java b/federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/group/GroupLDAPStorageMapper.java
index bd403d366c8..44e7ed8a513 100644
--- a/federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/group/GroupLDAPStorageMapper.java
+++ b/federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/group/GroupLDAPStorageMapper.java
@@ -779,6 +779,8 @@ public class GroupLDAPStorageMapper extends AbstractLDAPStorageMapper implements
                 return cachedLDAPGroupMappings.stream();
             }
 
+            cachedLDAPGroupMappings = Set.of();
+
             List<LDAPObject> ldapGroups = getLDAPGroupMappings(ldapUser);
             if (!ldapGroups.isEmpty()) {
                 GroupModel parent = getKcGroupsPathGroup(realm);