Roles sent from the IdP in SSO works only when the claim attached to UserInfo Token, not ID Token.

[MohammedNoureldin]

In the documentation of the SSO, to achieve the role assignment:

your provider must set a warpgate_roles OIDC claim (a JSON array of role names).

So far so good. The then problem comes here:

either in the ID Token or the UserInfo response.

I tested attaching the claim to the ID Token, and it did not work. It only only when it was attached to the UserInfo token.

This has either to be fixed in the code or in the docs.