Hi Alexander,
Thank you Alexander, this solution probably fits our needs. My only problem now is the I configured freeipa with docker, and in that image developer didn't include the Fedora Account System plugin for IPA so in the log I found:
ERROR in middleware: Uncaught IPA exception: Unknown option: fasgroup
I'll check with them if I can add this plug in post installation.
Regards, Riccardo