Assigning users to default group

I have an RT4.4.4 install that is currently setup for SSO through Shib. Users that authenticate right now end up in unprivileged as expected. I would like to find some way to have our Technical services group login but automatically be placed in Privileged, but have no idea whether this is possible

Does Shib use LDAP? There is