Yep and I'll add my experience at UNC was stellar where we allowed users to self-service AD via Grouper[0] and then Ping sourced information from there. It was

Yep and I'll add my experience at UNC was stellar where we allowed users to self-service AD via Grouper[0] and then Ping sourced information from there. It was integrated with AWS IAM and several other services, too. [0] https://www.internet2.edu/products-services/trust-identity/grouper/ https://www.internet2.edu/products-services/trust-identity/g...