Assigning users to default group

1

I have an RT4.4.4 install that is currently setup for SSO through Shib. Users that authenticate right now end up in unprivileged as expected. I would like to find some way to have our Technical services group login but automatically be placed in Privileged, but have no idea whether this is possible

2

Does Shib use LDAP? There is
https://docs.bestpractical.com/rt/5.0.0/RT/LDAPImport.html