Roles custom claim is empty after roles are set on user creation (via auto-import)