diff --git a/.gitignore b/.gitignore
index 543c5c16..9392ff9c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,6 @@ serverless-mfa-api/override/*.go
 serverless-mfa-api/override/server/*.go
 u2f-simulator/override/*.go
 u2f-simulator/override/u2fserver/*.go
+
+# Other files to exclude:
+*/config.json
diff --git a/docker-compose.yml b/docker-compose.yml
index fb10cd4b..ba688b0f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -198,6 +198,12 @@ services:
         # docker compose run --rm test vendor/bin/behat --stop-on-failure features/user.feature
         # docker compose run --rm test vendor/bin/behat --stop-on-failure features/user.feature:306
 
+    externalgroupssync:
+        build: ./ext-groups-sync
+        volumes:
+            -   ./ext-groups-sync/config.json:/app/config.json
+            -   ./ext-groups-sync/.env:/app/.env
+
     phpmyadmin:
         image: phpmyadmin:5
         ports:
diff --git a/ext-groups-sync/Dockerfile b/ext-groups-sync/Dockerfile
new file mode 100644
index 00000000..3fe6a88a
--- /dev/null
+++ b/ext-groups-sync/Dockerfile
@@ -0,0 +1,18 @@
+FROM ubuntu:24.04
+
+RUN apt-get update && apt-get install -y \
+      curl \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+RUN mkdir -p ~/.aws-lambda-rie
+RUN curl -Lo ~/.aws-lambda-rie/aws-lambda-rie https://github.com/aws/aws-lambda-runtime-interface-emulator/releases/latest/download/aws-lambda-rie
+RUN chmod +x ~/.aws-lambda-rie/aws-lambda-rie
+
+RUN curl --location -o personnel-sync.tar.gz https://github.com/silinternational/personnel-sync/releases/download/v6.8.3/personnel-sync_6.8.3_linux_amd64.tar.gz
+RUN tar -xzf personnel-sync.tar.gz
+RUN chmod +x personnel-sync
+
+CMD ["~/.aws-lambda-rie/aws-lambda-rie", "./personnel-sync"]