While the authentication works fine with the external role information, the roles are not shown in user account make it impossible to check the person's rules in Nexus.