Once upon a time we used AD binding and

dsconfigad 
-uid uidNumber \\
-gid extensionAttribute1 \\
-ggid extensionAttribute3

for individual mapping needs.

Is there a way to achieve custom mappings with the Single Sign-on Extension ?

Thanks a lot for your help!