The AP Workflow application utilizes two sources of information to grant a user the appropriate access. The Role dictates what actions the user can perform in the application. The Context dictates what information a user may see in the application. Both items are dictated by the AD Groups the individual is assigned to. The information from the AD Groups are relayed to the application via ADFS claims that an API parses and delivers to the application.