Normally, the authentication process does not make any changes to the actual user account in Canvas. I think the only way that you could have ADFS making those kinds of changes in Canvas is if you were using "Just in Time Provisioning" of user accounts based on the ADFS authentication source.
Even then, I'm not sure if it would be possible to map the "role" field from ADFS to a custom Canvas administrator role, but I've only played with JiT provisioning a little bit. (Remember, Admin roles are the only ones that can be assigned to the user account directly, as opposed to being the role assigned for that user in a particular course...)
Hi Ulrik,
Normally, the authentication process does not make any changes to the actual user account in Canvas. I think the only way that you could have ADFS making those kinds of changes in Canvas is if you were using "Just in Time Provisioning" of user accounts based on the ADFS authentication source.
Even then, I'm not sure if it would be possible to map the "role" field from ADFS to a custom Canvas administrator role, but I've only played with JiT provisioning a little bit. (Remember, Admin roles are the only ones that can be assigned to the user account directly, as opposed to being the role assigned for that user in a particular course...)
Mike