With http://projects.theforeman.org/issues/3528 resolved, externally-authenticated users now get their attributes like name and email address populated based on environment variables in Apache (our documented use is with mod_lookup_identity) when they are created.

With http://projects.theforeman.org/issues/3892 resolved, group membership of these newly created users get set based on environment variables in Apache.

We would like to update the attributes and group memberships upon every successful logon, not just set them once upon initial logon when the user is first created.

The current pull request for this feature is https://github.com/theforeman/foreman/pull/1424.