

Identity provider role assignment now supports multiple roles across SSO, Directory Sync, and AuthKit. SSO profile and directory user entities now include a roles property. When a user signs in or is synced, all IdP group memberships with an assigned role are evaluated and the user receives the union of all mapped roles. Learn more in the docs.