...
[17:35:38 CST(-0600)] <dmccallum54> the way the Angel SSO worked, uPortal had to be able to find you either in AD or as a uP local user
[17:36:37 CST(-0600)] <dmccallum54> that's where it would get the attributes that put you into a security group