Once the SSO is enabled, we can easily allow user to authenticate in the F5XC using the Okta provider. However, we still need to go into the F5XC to assign groups/roles to users for authorization (RBAC). We should be able to map Okta groups to F5XC groups/roles, so that we can integrate authentication + authorization at once, without the need to manually configure each user. Okta can includes the gorups in the access claim/token, somehow the group parameter should be mapped to the F5XC groups.