[keycloak-user] Users losing their roles for no apparent reason

[MEHDi CHAABOUNi]

Hi,

This is our Keycloak setup:

   - Keycloak docker container 4.4.0.Final
   - Azure Active Directory (mapping groups to roles)
   - Keycloak client protocol: openid-connect
   - 3 optional client scopes

We have one back-end application (spring-boot) and one front-end
application (angular).
We noticed lately that users using the front-end started losing their roles
for no apparent reason. I still can't figure out when it happens.
The only roles (authorities) left are offline_access and uma_authorization.
Deleting the user from Keycloak fixes the problem after reloading the
front-end but eventually the roles disappear again after a while.
Upgrading to the latest version of Keycloak didn't help.

Any ideas?

Thank you!