Your comments

We need this feature as well, but with SAML auth as opposed to LDAP auth.  Assuming if it gets solved for one auth method, it could be solved for all.