Each identity source contains different roles that the Policy Mapping page uses.
Active Directory: groups, local groups, and global groups
eDirectory: group
Each SaaS application contains different authorizations that the Policy Mapping page uses.
Google Apps: user and groups
Office 365: account, groups, and license
Salesforce: groups, roles, and profiles (account types)