We are trying to setup a role based authorization strategy plugin in order to use Ping Federate SAML 2.0 group name roles. 

I setup the Group Attributes and Username attributes and setting up Manage Roles and Assign roles.

However the authorization is not getting propogated to the groupname attribute which is coming from assertion response.

Due to this when a user part of that group logs in, it still complains that the user is missing read permissions where the user is actually part of admin group and assigned a role as administrator.