Automatic role mapping
If the SAML Session Provider is used and the user gets a role in the Security Role claim (in the login response) that is identical (case sensitive string matching) to an existing grid role, the user will be assigned that Grid role without an explicit mapping between the IFS Security Role and the Grid role.