An app is communicating via the Open ID Connect protocol with **AWS Cognito**, which is connected to **ADFS**, communicating via SAML. Cognito is essentially "proxying" the ADFS server.

ADFS holds a **group mapping** that the app requires, and I would like to import these groups into Cognito as actual Cognito Group - which will then be read by the app from the `cognito:groups` from the ID-token Cognito provides.

In the AWS Cognito User Pool setup, I don't see a way to map ADFS groups to Cognito Groups - must I absolutely rely on a custom attribute for my User Pool that I can map to the ADFS-property, or am I missing some piece of configuration that allows Cognito to create new groups on the fly and automatically assign the users to the groups in Cognito?

edit: To clarify, **Is it possible to setup Cognito to add/create groups (not as a custom property, but a actual manageable cognito groups) when it imports users?**