In the file of SssdClaimAuth.java L149-156

if (mapped.containsKey("Roles")) {
@SuppressWarnings("unchecked")
List<String> roles = (List<String>) mapped.get("roles");
for (String role : roles)

}
Claim claim = cb.build();

The code will checked key "Roles" where the word begin with upper letter. If mapping_rule_file contains "Roles", then will get the value according the key "roles" where the word begin with lower letter, but it will failed.

And if the mapping_rule_file does not contains key "Role" where the word begin with upper letter, then the cb will not have the value of role.

when claim_builder begins to build claim, the missing of role will cause a exception and fail.