OpenID Connect (http://openid.net/connect/) is the modern variant of SAML, and should be supported for SSO login for aha itself as well as for idea portals. OIDC is simpler to setup than SAML, and it is possible that a wider range of Identity Provider (IDPs) can be used by your customers.
We use OpenID connect with Slack, and it provides the ability for us to manage access rights with AD group membership cleanly and simply.
Without this, we are left using the fire-forget/inflexible option of attributes, which can't deal with nested orgs and various roles for individuals.
OpenID connect lets me assign a user as an owner of product x, reviewer of y,z, and administrator of product line a from direct group mappings. This lets us quickly terminate rights for exiting employees, quickly re-assign rights for employees that move from one project to another. Without it, we need to do all of this manually
We would find this feature extremely valuable as well.
We would love this functionality!