We use Okta and put ppl in groups so I'm not sure if that would work.