Using Plugin to modify the user group but reload when user connect

Pritunl
2

The sso_authenticate plugin handler can return user groups. These groups are merged with the groups provided by the single sign-on provider.