Add ability to remove or configure the default group "logged in users"

[dagraf]

Although #1388 brought some improvements concerning the group "logged in users", we would like to be able to not only change its name but also to remove it or configure which roles get sent to Opencasr when this group is selected. The reason for this is that we currently only want to allow users who belong to the Swiss SWITCHaai network to log in to Tobira. To enable this in our setting, we have to assign a specific role to this group (ROLE_AAI_ORG_unibe.ch_MEMBER). ROLE_USER is not sufficient. Therefore, it would be important for us to be able to either remove or customize the default role “Logged in users” via configurations.

[LukasKalbertodt]

I don't quite understand the reasoning here. If you only allow "Swiss SWITCHaai" people to log in, then only those people will ever have ROLE_USER. The role ROLE_AAI_ORG_unibe.ch_MEMBER sounds more specific than just "Swiss SWITCHaai", i.e. a subset, right? Can you list what groups you would like to appear in the Tobira drop down? With label, role and description (for me)? Maybe then I better understand.

[dagraf]

I copy-pasted the wrong role. The correct one is: ROLE_AAI_FEDERATION_MEMBER

@snoesberger: Can you answer the questions above? No need to hurry. Thanks!