Using existing active directory roles in Identity

Hey,

Can you use existing AD roles with C8 self-managed?

The use case is the following:

  • Our client has an existing process for assigning new AD roles.
  • He wants to secure C8 resources like Web Modeler or other web apps.
  • He wants to assign the roles without anyone doing it manually in Identity.

In C7 we had this filter in which we fetched users roles from JWT and if it was new user, we created him using java API and authorization service and assigned him corresponding roles based on the application configuration.

Any ideas on how to do that in C8?

Thank you in advance!

Jan