Today, the process of provisioning users authenticated via SAML is kludgey and requires manual/API configuration of an authentication table. Caspio's existing SAML features effectively duplicate the intended functionality of SAML, which is both for authentication and authorization.

It should be possible to leverage SAML scopes and/or attribute filtering to configure RBAC, including record-level authz.