<provider>
    <role>identity-assertion</role>
    <name>Pseudo</name>
    <enabled>true</enabled>
    <param>
        <name>principal.mapping</name>
        <value>guest,alice=hdfs;mary=hive</value>
    </param>
    <param>
        <name>group.principal.mapping</name>
        <value>*=users; same,dwayne,brenda-admins;joe=analysts</value>
    </param>
</provider>