public function getAllowedUserRights(SessionBackend $backend)
 {
     if ($backend->getProvider() !== $this) {
         throw new \InvalidArgumentException('Backend\'s provider isn\'t $this');
     }
     $data = $backend->getProviderMetadata();
     if ($data && isset($data['rights']) && is_array($data['rights'])) {
         return $data['rights'];
     }
     // Should never happen
     $this->logger->debug(__METHOD__ . ': No provider metadata, returning no rights allowed');
     return [];
 }