Added support synchronizing groups to roles

[mazar]

Okta allows you to create a scope and claim type for groups. Using this combination, it is possible to pass groups to the client (i.e. Airflow) and use that to synchronize groups with local role. This would make it easier to assign users to roles, if those roles are already defined in Okta. To make this work, name of the groups in Okta and roles in the client should match.