Ensure an event rule is configured for Idp Group Mapping changes.
Monitoring changes to Identity Provider Group Mappings like create, update and delete will help in identifying changes to the security posture.
Configure an event rule for Idp Group Mapping changes like create, update and delete.