diff --git a/auth/kanidm.nix b/auth/kanidm.nix
index 13360d8..6903b07 100644
--- a/auth/kanidm.nix
+++ b/auth/kanidm.nix
@@ -683,7 +683,7 @@ in
         assertGroupsKnown =
           opt: groups:
           let
-            knownGroups = attrNames (filterPresent cfg.provision.groups);
+            knownGroups = attrNames (filterPresent cfg.provision.groups) ++ [ "idm_all_persons" ];
             unknownGroups = subtractLists knownGroups groups;
           in
           {