...
When users log in at the beginning of a session and are successfully authenticated by the identity provider, a JSON Web Token is generated in which the users' roles are listed under authorities. The GET user.info (Webhook) webhook is responsible for providing the users' roles. By customizing the webhook, it is possible to connect any access management provider delivering the users' roles in a suitable format. Per default, the webhook calls the ORGANIZATION service that is responsible for providing the role information.
...