We have a requirement where we will be using OKTA active directory as our Identity provider (IdP) and Pega application as service provider (SP).

At the movement we have two pega applications to implement this, I need to know, how to we configure these two applications different different user roles and access groups.

Appreciate if you can reply about are we need to keep all those user levels(roles) in active directory as well ?

Thanks