We would love to be notified by email when users of given groups connects. The email would at least contains the login, the group and the destination server.
I guess it could be done through pam_exec, but being able to choose from The Bastion for which groups we want to be notified would be nicer.