Pre-assign oidc identities to roles

[maxb]

A recent post where I talked about setting up groups in more detail: Provide a mapping between google and vault groups when using GSuite IDP in OIDC backend - #2 by maxb