Implement role acquisition for OpenAM