Thanks for the article, straight to the point but full of informations.
What if I have SuccessFactors as idp and I want to use groups and roles defined in it? I only find docs and examples where users are traced in Cloud Foundry with CF assigned rol...