User Assigned as Admin if OKTA ADMIN_GROUPS are Configured and User has OKTA Groups

[mm-dennismccann]

I was looking into why every account seemed to first log into the host app was automatically designated as a superuser.

In the code below, it looks like any user is made a superuser if they have existing OKTA groups and the hosting app has a value for ADMIN_GROUPS in the OKTA configuration.

I think the intended condition is if any of the OKTA ADMIN_GROUPS are inside the set of user OKTA groups.

django-okta-client/okta_client/auth_backends.py

Lines 95 to 96 in 3db96e1

	if frozenset(settings.OKTA_CLIENT['ADMIN_GROUPS']) & frozenset(user_groups):
	LOGGER.debug('Found an admin: %s', login)

[irvingleonard]

The intended logic is to do set(A,B) & set(B,C) which should yield set(B) (set intersection).