On SSO send the roles from old application