[keycloak-user] Roles from UserStorageSPI

Hi, I have successfully authenticated users from a custom User Storage Provider. I cannot find how I map roles to the users that come from this provider. I am able to include the user's roles in the UserModel, and i have created ClientRoles which match, but I can’t find how I attribute Roles to my users. Furthermore, I have a default realm role, but this never appears in the ID token or userInfo object. Any pointers appreciated. Thanks Rob