Can I sync entitlements within application with Active Directory groups ?
Yes, you can sync entitlements within the application with Active Directory groups using SAML group mapping. This allows group membership to be controlled at the identity provider (IdP) level. When SAML group mapping is enabled, changes in group membership at the IdP are reflected in the application upon the user’s next login. This setup requires configuring the SSO with the groups attribute included. For more details, refer to the “Managing groups” and “Configuring SAML-based SSO” sections in the documentation.