...
Now you can follow the regular steps of configuring the claims and Vivi.
'GOTCHAs'
A SAML claim can only return 150 SAML groups total. Anything beyond that will return a link to an MS Graph object which will not resolve properly with our systems. To avoid this, users can be configured with only the groups assigned to the application being returned (see https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fed-group-claims#add-group-claims-to-tokens-for-saml-applications-using-sso-configuration)