We are currently collecting app roles that have an end-date attribute in the application. Ideally we'd like to collect the end-date, knowing that the end-date could be different for each account who has that app-role. So it could be the same app role for 5 different accounts and all 5 people would have a separate value for the end-date attribute. What is the best way to achieve this?
The right approach in my opinion is to define a User Entitlement extension attribute called "End Date" and collect that in the App Roles for Accounts Query.