Kpow supports two new RBAC configuration parameters:
saml: role_field: "Groups" authenticated_roles: ["foo" "bar"]
role_field specifies the field in your authentication payload that identifies user roles.
authenticated_roles restricts access to strictly users with at least on of the listed roles.