Fleet versions

• Discovered: 4.86
• Reproduced:

Web browser and operating system:

💥  Actual behavior

Customer-Panoramix reports that their host vitals labels which match users based on IdP groups are not capturing any hosts. We have verified the labels and their Fleet server's connection to their IdP.

🛠️ Expected behavior

TODO

🧑‍💻  Steps to reproduce

These steps:

• Have been confirmed to consistently lead to reproduction in multiple Fleet instances.
• Describe the workflow that led to the error, but have not yet been reproduced in multiple Fleet instances.

1. Create a host vitals label based on an IdP group, scope it to a fleet or globally.
2. Observe that no matching hosts are added to the label.

🕯️ More info (optional)

Customer thread: https://fleetdm.slack.com/archives/C09QZ73USMB/p1780599306361589
Internal thread: https://fleetdm.slack.com/archives/C062D0THVV1/p1780603592240319