Hi Michael
we have similar integration with onelogin and we were able to make users part of mutiple rolegroups\AD groups.
Apart from this I have a question , do you analytics , server monitoring , DB monitoring if yes how are you planning RBAC for ...
I think getting the license usage per application is extremely useful not sure why there is no demand when I spoke to many customer in the conference they did the say the same.