Merge attribute values back into user object.

[jazzzpor]

I was wondering if it is possible to merge the attributes from the SamlSpToken back into the user object.
In my perticular use case I want to update the user roles provided by the IdP in the database after a successful login.

Edit: As a workaround I have not specified the "provider" option in the firewall config. This way the user_creator service is always used after a succesful login. This feels like a hack though.

[cfoehrdes]

Can anyone provide some information about this case. We also need to update the user roles as well as some user properties based on the SAML response?