The ability to configure role mappings between identity provider roles/groups and the application's within the application.