From rhn-support-mrussell:

Looking for feedback but short of testing it out. So: "does this seem like a reasonable approach?" and "should it be supported?" are the primary questions I think.
 
We have customer demand for personalized audit trails from external identity providers and we ship the bits so I think the answer to the second question should be yes. But I could be overlooking something important.
 
It's not about the specifics of the configuration. The IdM team has already left feedback from that point of view. But is it crazy or otherwise bad from an RHCOS/MCO perspective?
 
https://docs.google.com/document/d/1g3PFHv_AnPba18ff6hR2jTjpH3HmO5Cf2gHEY0T57i4/edit#heading=h.xqb8j37hsc56