When using Azure ADFS as the backend, we'd like to be able to utilize the "roles" provided in the token to populate groups and gate access. The roles are communicated via the token in the same way as groups. We don't mind if these roles show up as "groups" in RBAC, we just would like them consumed so we can assign roles based on them.
I believe for this information to be used by Canonical RBAC, it will first need to be grabbed and parsed by Candid, which is why I'm raising the request here.
When using Azure ADFS as the backend, we'd like to be able to utilize the "roles" provided in the token to populate groups and gate access. The roles are communicated via the token in the same way as groups. We don't mind if these roles show up as "groups" in RBAC, we just would like them consumed so we can assign roles based on them.
I believe for this information to be used by Canonical RBAC, it will first need to be grabbed and parsed by Candid, which is why I'm raising the request here.