Elytron provides a RoleMapper interface. After the roles have been decoded for an identity, a role mapper can be used to apply further mappings to the role names, e.g., this could be as simple as normalising the format of the names through or adding or removing specific role names.

The RoleMapper interface provides an or method that returns the union (i.e., logical “or”) of the results of this role mapper and the given RoleMapper.

Add a test to RoleMappingTest that defines a couple RoleMappers and uses the RoleMapper#or method to find the union of the roles.

Take a look at RoleMappingTest and RegexRoleMapperTest to see how to define a RoleMapper and map roles.