SSO Groups

Currently SAML Single Sign On is all or nothing, the entire organization gets access via just in time provisioning. It would be great to be able to limit this via the existing groups in the identity provider, and map groups to checkly user roles.