Just FYI for anyone using Jumpcloud with Rancher for auth - we successfully got a mix of ldap and saml working using the shibboleth connection yesterday and are working on documenting the setup. This gives you full user/group lookup with saml app "connectivity" - kind of the best of both worlds.. And you don't hit the issues of either system individually! Happy to answer questions if it's useful to anyone.