diff --git a/repository/src/main/java/de/acosix/alfresco/keycloak/repo/sync/GroupContainmentUserFilter.java b/repository/src/main/java/de/acosix/alfresco/keycloak/repo/sync/GroupContainmentUserFilter.java
index bb3d2d8..246733e 100644
--- a/repository/src/main/java/de/acosix/alfresco/keycloak/repo/sync/GroupContainmentUserFilter.java
+++ b/repository/src/main/java/de/acosix/alfresco/keycloak/repo/sync/GroupContainmentUserFilter.java
@@ -63,7 +63,7 @@ public class GroupContainmentUserFilter extends BaseGroupContainmentFilter imple
                 offset += processedGroups;
             }
 
-            if (parentGroupIds.isEmpty() || parentGroupPaths.isEmpty())
+            if (!parentGroupIds.isEmpty() || !parentGroupPaths.isEmpty())
             {
                 final boolean parentGroupsMatch = this.parentGroupsMatch(parentGroupIds, parentGroupPaths);
                 if (this.matchDenies)