External identify provdier (idP) - Initiate authentication and roles

Within Okta I create a “group” for each of the “roles” I need. For the user logging in, I collect the groups that they are a member of and then map that value to “roles”.

For posterity - a new auto login feature was added to Perspective in 8.1.8 which addresses some of the questions earlier in this thread. See: