Dec 03, 2015
Nov 08, 2016
Closed, Fixed and tested
Install a Alloy site.
Install Google Analytics plugin
Remove membership/roleprovider from web.config (actually in this case customer use ASP.net Identity)
Set <authentication mode="None"> in web.config
For ASP.net Identity follow http://sveinaandahl.blogspot.no/2015/08/how-to-integrate-aspnet-identity-with.html
It seems that the underlying issue is that they're able to login with ADFS (with roleManager to set true or false), but can't see the GA gadget or config even with their role added to the virtual roles in episerver.framework section of web.config.
I think the EPIAdmins group needs to be allowed for the "admin" location (web.config), similar to this:
<allow roles="CmsAdmins, EPIAdmins" />
<deny users="*" />