===== RoleIdentifiers element

[source,xml]
----

<RoleIdentifiers>
     <Attribute name="Role"/>
     <Attribute name="member"/>
     <Attribute name="memberOf"/>
</RoleIdentifiers>
----

This element is optional.
It defines which SAML attribute values in the assertion should be mapped to a Java EE role.
By default `Role` attribute values are converted to Java EE roles.
Some IDPs send roles via a `member` or `memberOf` attribute assertion.
You define one or more `Attribute` elements to specify which SAML attributes must be converted into roles.