WSO2 IS Role of Facebook user in SAML response

Question

I'm using Spring Security SAML with WSO2 IS. When I login with Facebook and get SAML response from WSO2 IS in my application I haven't role attribute in Authentication object.

For example, when I login with basic auth, then I have role attribute :|

Claims in Service Provider are configured like below:

Thank you for any help!

Answer 1

I have connected custom PostgreSQL user store and for some reason in table um_user_role I haven't relation between role and Facebook user, but in carbon IS it is. :\

When I added relation manually into this table all works fine.