...

Choose which groups to send in the group claim. Some of those options are only going to work if you are syncing on-prem to cloud. Each works a little differently. The Microsoft documentation might be helpful. The image here shows choosing to set up the groups as roles on the enterprise application, and the following screenshots use that approach, but it’s fine to choose any of them. If you choose another, the page Setting up group mapping with the FlexDeploy SSO Realm Group Mapping would be the one you would want to read.

...

Setting up group mapping with the FlexDeploy SSO Realm

See Setting up group mapping with the FlexDeploy SSO Realm Group Mapping for the steps to do there.