Hello,

Please support OAuth2/OIDC authentication in the Omada Controller.

SAML SSO is error prone to wrong group membership on the IdP side that lead to identification errors on the Omada Controller side.

When a user belongs to multiple groups and the IdP uses a group to login not configured in the Omada Controller then login fails.

OAuth2/OIDC works regardless of group membership.

To deal with (Permissions of) Group Memberships Omada can use OpenID backchannel via LDAP.