I've configured cas-plugin ( https://localhost/jenkins/configureSecurity/ ) :

Security Realm :

• CAS Protocol : CAS 2.0
• Roles Attribute(s) : groups,roles
• Full Name Attribute : cn
• Email Attribute : mail
• Proxy Settings : Accept Proxy Tickets

Authorization :

• Role-Based Strategy

CAS Authentification successfully works, email and Full Name successfully updating following information send by CAS server. But Roles/groups aren't updated in https://localhost/jenkins/role-strategy/assign-roles

CAS Information seed to Jenkins :

<cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas">
<cas:authenticationSuccess>
<cas:user>john.doe</cas:user>
<cas:attributes>
<cas:uid>3586a481-f948-4b94-be1f-abb98a492c43</cas:uid>
<cas:mail>john.doe@server.com</cas:mail>
<cas:roles>role1,roleB,administrators</cas:roles>
<cas:groups>group1,group3</cas:groups>
<cas:cn>John DOE</cas:cn>
</cas:attributes>
<cas:proxyGrantingTicket>PGTIOU-1-hqkXZxLkdmaJKL4cbP3D-localhost</cas:proxyGrantingTicket>
</cas:authenticationSuccess>
</cas:serviceResponse>