Problem

Not all identity providers provide the same API for access groups. This is especially true for Google which has a rather strange mechanism for fetching group information.

Most identity providers, including Okta, require an individuals access token in order to query information about their groups. However, our abstractions now do not consider this and don't allow for this case.

Solution

We pass on the access token now for all identity providers, even if not all identity providers (like Google) require it. This will prove useful and necessary when we get further along for adding access for Okta as an identity provider, which does require it.