I wanted to ask members and get a discussion going on the best practices regarding Work Group and Work Queue mapping (how and why) to Operators after Login i.e after the operator has been authenticated and authorized.

At the current time I am working at an organization that has set up an outside Authentication and Authorization model for my PEGA Application. Once an operator has been successfully authenticated by an external service, that operator is authorized to use my PEGA Application by getting a set of 'tokens' from this external service.

Can some one guide me on HOW to map the authorization tokens (most likely SAML metadata) received to existing/current WorkGroups and WorkQueus inside PEGA and what are the best practices related to this functionality.

***Edited by Moderator: Pallavi to update platform capability tags***